examples/demo: bump terdut-server to v0.34.0 (the service-account fix)
CI / chart (pull_request) Successful in 2s
CI / security (pull_request) Successful in 1m18s
CI / test (pull_request) Successful in 3m40s

Required for this demo to actually exercise the fix for
niklas/terdut-operator#3 -- v0.33.2 still has the authorization gap this
demo hit live (callerMayManageServiceAccount had no branch letting an
instance-scoped account adopt a team-scoped account's key).
This commit is contained in:
Niklas Ye
2026-10-02 22:13:26 +02:00
parent a0ea13955e
commit 4aa4f17c42
+6 -1
View File
@@ -14,7 +14,12 @@ metadata:
spec:
image:
repository: git.ryuvia.com/niklas/terdut-server
tag: v0.33.2
# v0.34.0: fixes callerMayManageServiceAccount so an instance-scoped
# service account can adopt/rotate a key on a team-scoped account it
# didn't just create in the same call -- without this, terdutteam-*
# can wedge permanently on exactly the crash-window race this demo
# hit live (niklas/terdut-operator#3).
tag: v0.34.0
replicas: 1
networking:
hostname: terdut-operator-demo.example