adec2c135f
His app lives in novelapp, but the dashboard injects his SA token (system:serviceaccount:vabbit81:dashboard-vabbit81), while the existing binding only granted the OIDC User vabbit81@gmail.com (OIDC blocked). Add the SA as a second subject so the web dashboard (token-injector) can manage novelapp. Verified: SA can list/create in novelapp; injector path returns 200. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| main.tf | ||
| providers.tf | ||
| secrets | ||
| terragrunt.hcl | ||