chore(vault): add vault_forgejo_token_audit_token (#75) #109

Sammanfogat

supernaut sammanfogade 1 incheckning från chore/vault-token-audit-pat in i main

2026-07-18 16:23:13 +00:00

supernaut kommenterad

2026-07-18 16:19:11 +00:00

Ägare

Vaults the read:admin PAT for the gitborg-token-audit account, activating the token-audit timer (#75 / #96). Encrypted (ansible-vault AES256) — no plaintext in the diff. Already live on prod; this lands it on main so a future --tags token-audit apply doesn't render an empty token and break the audit.

Pairs with #108 (the script readability fix).

Vaults the `read:admin` PAT for the `gitborg-token-audit` account, activating the token-audit timer (#75 / #96). Encrypted (ansible-vault AES256) — no plaintext in the diff. Already live on prod; this lands it on `main` so a future `--tags token-audit` apply doesn't render an empty token and break the audit. Pairs with #108 (the script readability fix).

supernaut lade till 1 incheckning

2026-07-18 16:19:11 +00:00

chore(vault): add vault_forgejo_token_audit_token (#75 )

ci / ci (pull_request) Successful in 1m26s

Detaljer

e886f48394

Activates the token-audit timer (gitborg-infra#75): read:admin PAT on the
gitborg-token-audit service account, vaulted. Encrypted with ansible-vault
(AES256) as usual — no plaintext. Lands on main so a re-apply doesn't
render an empty token and break the audit.

supernaut sammanfogade incheckning 519dd3f731 till main

2026-07-18 16:23:13 +00:00

supernaut tog bort grenen chore/vault-token-audit-pat

2026-07-18 16:23:14 +00:00

supernaut refererade denna ändringsförfrågan från en incheckning

2026-07-18 16:23:15 +00:00

chore(vault): add vault_forgejo_token_audit_token (#75) (#109)

supernaut refererade till denna ändringsförfrågan

2026-07-18 20:30:37 +00:00

v16: automated service-account token rotation via the admin token API #75

supernaut refererade till denna ändringsförfrågan

2026-07-30 16:38:26 +00:00