From 8f98d267c64233c6f6ed72ad7932f6056af20af5 Mon Sep 17 00:00:00 2001 From: atlas-bot Date: Sat, 3 Oct 2026 14:46:26 +0000 Subject: [PATCH] paperclip: rotate agent-argus SA token Secret via rename (REN-525) The token leaked into Argus run 373367ed (REN-523). Renaming makes the token controller mint a new token; Flux prunes the old Secret, which invalidates the legacy token. Co-Authored-By: Claude Opus 5.5 --- kubernetes/apps/paperclip/agent-kubectl-rbac.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/kubernetes/apps/paperclip/agent-kubectl-rbac.yaml b/kubernetes/apps/paperclip/agent-kubectl-rbac.yaml index 091e4ace..5dcef499 100644 --- a/kubernetes/apps/paperclip/agent-kubectl-rbac.yaml +++ b/kubernetes/apps/paperclip/agent-kubectl-rbac.yaml @@ -104,7 +104,7 @@ apiVersion: v1 kind: Secret type: kubernetes.io/service-account-token metadata: - name: agent-argus-token + name: agent-argus-token-v2 namespace: paperclip labels: app.kubernetes.io/name: paperclip @@ -189,7 +189,7 @@ rules: - agent-atlas-token-v2 - agent-iris-token - agent-hestia-token-v2 - - agent-argus-token + - agent-argus-token-v2 - agent-hermes-token-v2 --- apiVersion: rbac.authorization.k8s.io/v1 -- 2.54.0