new tactic: ESO secret pusher #117

Merged

jessebot merged 1 commit from new-tactic-eso-secret-push into main

2026-10-14 19:49:27 +00:00

jessebot commented

2026-10-14 18:22:42 +00:00

Owner

Changes from only creating an OpenBao policy per namespace for reading, to making sure that policy can also write (to it's own namespace and path only). It requires an account called {self.namespace}-eso which would be something like {env}-{app}-eso so possibly prod-forgejo-eso for example.

Will need to be merged in combination with oeng/argocd-apps#127

Changes from only creating an OpenBao policy per namespace for reading, to making sure that policy can also write (to it's own namespace and path only). It requires an account called `{self.namespace}-eso` which would be something like `{env}-{app}-eso` so possibly `prod-forgejo-eso` for example. Will need to be merged in combination with https://git.open.engineering/oeng/argocd-apps/pulls/127

jessebot added the

minor

label

2026-10-14 18:22:42 +00:00

jessebot added 1 commit

2026-10-14 18:22:42 +00:00

new tactic: ESO secret pusher

Test smol-k8s-lab / test_k3s (pull_request) Has been cancelled

Details

d045c0dd35

jessebot self-assigned this

2026-10-14 18:24:45 +00:00