Kubernetes registry credentials that expire on their own
A GitLab deploy token in an imagePullSecret is a long-lived credential sitting in a namespace, and it does not have to be.
← All tags
secrets
AWX returns $encrypted$ and terraform stops trusting you
The most reported bug in the AWX provider was never really a bug in the provider.
Configuring the thing that makes tokens needs a token
The GitLab secrets engine needs a GitLab token to start, which makes provisioning it from terraform more awkward than it looks.
A Vault secrets engine for GitLab tokens
GitLab tokens live in CI variables for a year at a time, and nobody remembers which ones are still there.