From 4aa4f17c42efab36b0d3b2be9af84a4c7495ba91 Mon Sep 17 00:00:00 2001 From: Niklas Ye Date: Fri, 2 Oct 2026 22:13:26 +0200 Subject: [PATCH] examples/demo: bump terdut-server to v0.34.0 (the service-account fix) Required for this demo to actually exercise the fix for niklas/terdut-operator#3 -- v0.33.2 still has the authorization gap this demo hit live (callerMayManageServiceAccount had no branch letting an instance-scoped account adopt a team-scoped account's key). --- examples/demo/01-server.yaml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/examples/demo/01-server.yaml b/examples/demo/01-server.yaml index b7df709..901784d 100644 --- a/examples/demo/01-server.yaml +++ b/examples/demo/01-server.yaml @@ -14,7 +14,12 @@ metadata: spec: image: repository: git.ryuvia.com/niklas/terdut-server - tag: v0.33.2 + # v0.34.0: fixes callerMayManageServiceAccount so an instance-scoped + # service account can adopt/rotate a key on a team-scoped account it + # didn't just create in the same call -- without this, terdutteam-* + # can wedge permanently on exactly the crash-window race this demo + # hit live (niklas/terdut-operator#3). + tag: v0.34.0 replicas: 1 networking: hostname: terdut-operator-demo.example