unkin-agent de9d6e5fcc Grant agents AppRole read on the Authentik provider token ...

A one-off terragrunt import in terraform-authentik is needed to reconcile
resources orphaned by the failed jellyfin apply, and the agents role must
read the Authentik provider token to run it. Revertable after the import.

- Add kv/service/terraform/authentik/read policy (read on
  kv/data/service/terraform/authentik) bound to the agents AppRole

2026-08-23 22:31:13 +10:00

..

arrstack

vault: add arrstack policies (deployer + KV read + creds) (2/3) (#126)

2026-08-19 22:54:13 +10:00

auth

feat: add plan workflow

2026-05-21 23:52:30 +10:00

consul_root/au/syd1

Rename terraform-ipam CI Vault access -> terraform-infra (#111)

2026-08-06 22:25:38 +10:00

ghp

vault: ghp engine config-write + consumer policies (apply before #121) (#122)

2026-08-16 14:49:33 +10:00

gitea

Let the agents AppRole mint unkin-agent Gitea tokens (#114)

2026-08-08 23:41:53 +10:00

gpg

Add logarchive gpg key + logging_logarchiver read access (#106)

2026-07-29 20:39:41 +10:00

kubernetes/au

Add Vault-scoped agent kubernetes roles + agents AppRole (#109)

2026-08-02 21:55:05 +10:00

kv

Grant agents AppRole read on the Authentik provider token

2026-08-23 22:31:13 +10:00

litellm

fix: grant vault deployer access to manage the litellm engine (#84)

2026-07-07 20:10:43 +10:00

netbox

Mint the netbox user-management credential dynamically from the single admin token (#119)

2026-08-12 00:03:13 +10:00

pki/au/syd1

feat: add plan workflow

2026-05-21 23:52:30 +10:00

pki_int

feat: add plan workflow

2026-05-21 23:52:30 +10:00

pki_root

feat: add plan workflow

2026-05-21 23:52:30 +10:00

rancher

Grant vault deployer access to import + manage the rancher engine (#91)

2026-07-18 14:34:54 +10:00

rundeck

feat: add plan workflow

2026-05-21 23:52:30 +10:00

sshca

feat: add plan workflow

2026-05-21 23:52:30 +10:00

sys

chore: setup access to enable all plugins, designated to tf-vault user (#94)

2026-07-18 14:42:02 +10:00

transit

feat: add plan workflow

2026-05-21 23:52:30 +10:00

global-root.yaml

feat: major restructuring in migration to terragrunt

2026-01-26 23:02:44 +11:00

policies.hcl

feat: major restructuring in migration to terragrunt

2026-01-26 23:02:44 +11:00