unkin-agent
563b2164c7
ci/woodpecker/push/apply Pipeline was successful
vlogs is the first app needing a second OIDC secret in a namespace that already has one, so the one-per-namespace `oauth-credentials` wildcard does not cover it and the terraform-authentik plan fails on a denied kv read. - grant the runner read on `kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials` Unblocks terraform-authentik #40. Reviewed-on: #157 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>