sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests Projects Releases 386 Packages Wiki Activity

feat(performance): add a restricted collector OAuth identity #480

Merged
binjovi-bot merged 2 commits from codex/pipeline-profiler-oauth-20260909 into trunk 2026-09-09 12:46:05 +00:00
Conversation 0 Commits 2 Files changed 5 +189
sean commented 2026-09-09 12:41:21 +00:00
Owner
Copy link

Give the pipeline collector a separate client with only binjovi.profile scope. A dedicated secret reader can copy only this credential into Alloy. The registration job checks the client before it writes and reads back the scope and grant type.

Validation: scope and credential boundary contract, service account reference checks, guard registration checks, and Kubernetes server dry run passed.

Give the pipeline collector a separate client with only binjovi.profile scope. A dedicated secret reader can copy only this credential into Alloy. The registration job checks the client before it writes and reads back the scope and grant type. Validation: scope and credential boundary contract, service account reference checks, guard registration checks, and Kubernetes server dry run passed.
feat(performance): add a narrow collector OAuth identity
Some checks failed
binjovi/ci Binjovi failed the frozen plan
Details
ca2114f830
test(platform): include the profiler OAuth resources
All checks were successful
binjovi/ci Binjovi completed the frozen plan
Details
7f8ed6e969
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/seanfarm!480
No description provided.