Labels Milestones New Pull Request

0 Open 153 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

Milestone

All milestones No milestones

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 153 Closed

Label

Clear labels

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

No assignee

benvin

unkin-agent

unkinben

Accept IP and short-hostname principals on sshca/signhost

#155 by unkin-agent was merged 2026-09-24 22:26:56 +10:00

master

benvin/sshca-ip-principals

Grant the puppet k8s role PKI issue and SSH host signing

#154 by unkin-agent was closed 2026-09-22 22:36:32 +10:00

master

benvin/puppet-k8s-pki-sshca

Fix SSH host certificate signing for the sshca role

#153 by unkin-agent was merged 2026-09-19 15:48:44 +10:00

master

benvin/sshca-sign-path-and-principals

1

Add kubernetes auth roles for the puppet compilers

#152 by unkin-agent was merged 2026-09-13 22:54:45 +10:00

master

benvin/certmanager-k8s-auth

Grant the agents approle read+write on the woodpecker agent token

#151 by unkin-agent was merged 2026-09-12 13:19:57 +10:00

master

benvin/woodpecker-agents-token

chore: extend oidc login to 1 day

#150 by benvin was merged 2026-09-08 22:34:16 +10:00

master

benvin/oidc_1day

Grant the vault deployer sudo to enable the oidc auth mount

#149 by unkin-agent was merged 2026-08-31 22:21:02 +10:00

master

benvin/sys-auth-oidc-grant

Grant the vault deployer auth/oidc and identity group capabilities

#148 by unkin-agent was merged 2026-08-30 22:14:43 +10:00

master

benvin/oidc-deployer-grants

Add Authentik OIDC SSO as the default human login for OpenBao

#147 by unkin-agent was merged 2026-08-30 22:38:05 +10:00

master

benvin/auth-oidc

1

Grant the vault deployer read on the Authentik OIDC client secret

#146 by unkin-agent was merged 2026-08-30 21:50:58 +10:00

master

benvin/oidc-client-read-grant

Bump vault-secrets-arrstack provider to 0.2.0 and plumb methods

#145 by unkin-agent was merged 2026-08-30 18:19:05 +10:00

master

benvin/arrstack-provider-0.2.0

Bump arrstack plugin catalog to v0.2.0

#144 by unkin-agent was merged 2026-08-30 17:07:29 +10:00

master

benvin/arrstack-plugin-sha-0.2.0

Grant terraform-rancher read on rancher/creds/ci

#143 by unkin-agent was merged 2026-08-30 09:42:00 +10:00

master

benvin/rancher-creds-ci-policy

Add ephemeral Gitea creds for repospawner

#142 by unkin-agent was merged 2026-08-30 09:29:26 +10:00

master

benvin/repospawner-gitea-creds

Add arrstack creds role and k8s auth for mediamark

#141 by unkin-agent was merged 2026-08-30 09:40:27 +10:00

master

benvin/mediamark-arrstack-role

Grant terraform-authentik write on the kv/service/authentik subtree

#140 by unkin-agent was merged 2026-08-29 23:01:43 +10:00

master

benvin/tf-authentik-kv-write

Grant agents approle read on kv/service/authentik/agent-api-token

#139 by unkin-agent was merged 2026-08-29 12:56:07 +10:00

master

benvin/agents-authentik-token

Revert temporary agents read grant on Authentik provider token

#138 by unkin-agent was merged 2026-08-25 21:35:57 +10:00

master

benvin/revert-agents-authentik-read

Grant agents AppRole read on the Authentik provider token

#137 by unkin-agent was merged 2026-08-23 22:34:32 +10:00

master

benvin/agents-authentik-read

Run plan without acquiring the Consul state lock

#136 by unkin-agent was merged 2026-08-23 22:31:58 +10:00

master

benvin/lockfree-plan