hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions

Use client-only WIF runner grants
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m0s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 6s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details

Browse source
This commit is contained in:
Conrad Kramer 2026-06-07 13:34:53 -07:00
parent e7c0442a12
commit 51f34c9a64
3 changed files with 5 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
infra/identity/variables.tf
View file

@ -177,9 +177,9 @@ variable "google_wif_allowed_audiences" {
}
variable "google_wif_runner_group" {
description = "Mapped Authentik group allowed to assume the runner service account. Empty allows the whole pool."
description = "Mapped Authentik group allowed to assume the runner service account. Leave empty for machine-to-machine client credentials."
type = string
default = "burrow-automation"
default = ""
}
variable "google_wif_runner_client_id" {