Skip to content

chore: add temporary verify-vault-secrets workflow#278

Closed
kellervater wants to merge 1 commit into
mainfrom
fix/verify-vault-secrets
Closed

chore: add temporary verify-vault-secrets workflow#278
kellervater wants to merge 1 commit into
mainfrom
fix/verify-vault-secrets

Conversation

@kellervater

Copy link
Copy Markdown
Member

Diagnostic workflow to validate community-role AppRole (VAULT_ROLE_ID / VAULT_SECRET_ID) health after the post-wave-2 (May 27 2026) Vault SecretID drift. Triggered via workflow_dispatch; will be removed once verified. Do not merge.

Copilot AI review requested due to automatic review settings May 27, 2026 13:10
@kellervater kellervater force-pushed the fix/verify-vault-secrets branch from c594e4e to afb16be Compare May 27, 2026 13:13

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a temporary manually triggered GitHub Actions workflow to validate Vault AppRole/SecretID health for the repository after the noted Vault SecretID drift.

Changes:

  • Adds workflow_dispatch diagnostic workflow for Vault authentication.
  • Reads one Vault secret using the repository’s VAULT_ADDR, VAULT_ROLE_ID, and VAULT_SECRET_ID.
  • Documents the workflow as temporary and intended for removal after verification.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

verify:
runs-on: ubuntu-latest
timeout-minutes: 5
permissions: {}
@kellervater

Copy link
Copy Markdown
Member Author

Closing — related to camunda/team-infrastructure#867. Vault auth verified healthy across all community-role repos; the original failure was a transient race during wave 2 prod apply window. Deleting branch.

@kellervater kellervater deleted the fix/verify-vault-secrets branch May 27, 2026 13:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants