fix(runway): rename the workload secret to ar-service-tokens

João Pereirarequested to merge
jdrpereira/rename-ar-service-tokens-secret into main

Context

The ar-bootstrap-token workload secret predates the real authentication path: it originally held only AR_BOOTSTRAP_TOKEN. The bootstrap token is retired, and the secret now carries only the two service tokens (AR_GITLAB_API_SERVICE_TOKEN, AR_IAM_SERVICE_TOKEN), so the name is misleading.

This is a fix so that it triggers a deployment.

What

  • Rename the workloadSecrets reference in .runway/deployment.yaml to ar-service-tokens.
  • Update the .com infrastructure doc's Vault tree and secretEnvFrom note to match.

Rollout

  • The Vault secrets env/staging/service/artifact-registry-gke/ar-service-tokens and the production twin already exists
  • Delete the old ar-bootstrap-token Vault entries in both environments after a green deploy.
Edited by João Pereira

Merge request reports