Skip to content

Add a binding to the cluster role system:auth-delegator to the service account in vault-secrets

Pierre Guinoiseau requested to merge pguinoiseau/vault-secrets-clusterrole into main

So that we can use the client's short-lived token instead of a long-lived token configured in Vault, see https://gitlab.com/gitlab-com/gl-infra/reliability/-/issues/16931

Merge request reports