From 856fc28866f0a0a89ba9d6972b049d7bdc6757ef Mon Sep 17 00:00:00 2001 From: atlas-bot Date: Sat, 3 Oct 2026 16:48:32 +0000 Subject: [PATCH] fix(paperclip): rotate agent-atlas SA token Secret to -v3 (REN-539) The agent-atlas-token-v2 token leaked in an Atlas run log (REN-536). Rename the Secret to -v3 so Flux prunes -v2 and the token controller issues a new token; update the agent-token-read resourceNames entry. Co-Authored-By: Claude Opus 5.5 --- kubernetes/apps/paperclip/agent-kubectl-rbac.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/kubernetes/apps/paperclip/agent-kubectl-rbac.yaml b/kubernetes/apps/paperclip/agent-kubectl-rbac.yaml index 5dcef499..cc4f2a2a 100644 --- a/kubernetes/apps/paperclip/agent-kubectl-rbac.yaml +++ b/kubernetes/apps/paperclip/agent-kubectl-rbac.yaml @@ -71,7 +71,7 @@ apiVersion: v1 kind: Secret type: kubernetes.io/service-account-token metadata: - name: agent-atlas-token-v2 + name: agent-atlas-token-v3 namespace: paperclip labels: app.kubernetes.io/name: paperclip @@ -186,7 +186,7 @@ rules: resources: ["secrets"] verbs: ["get"] resourceNames: - - agent-atlas-token-v2 + - agent-atlas-token-v3 - agent-iris-token - agent-hestia-token-v2 - agent-argus-token-v2 -- 2.54.0