examples/demo: bump terdut-server to v0.34.0 (the service-account fix)
Required for this demo to actually exercise the fix for niklas/terdut-operator#3 -- v0.33.2 still has the authorization gap this demo hit live (callerMayManageServiceAccount had no branch letting an instance-scoped account adopt a team-scoped account's key).
This commit is contained in:
@@ -14,7 +14,12 @@ metadata:
|
|||||||
spec:
|
spec:
|
||||||
image:
|
image:
|
||||||
repository: git.ryuvia.com/niklas/terdut-server
|
repository: git.ryuvia.com/niklas/terdut-server
|
||||||
tag: v0.33.2
|
# v0.34.0: fixes callerMayManageServiceAccount so an instance-scoped
|
||||||
|
# service account can adopt/rotate a key on a team-scoped account it
|
||||||
|
# didn't just create in the same call -- without this, terdutteam-*
|
||||||
|
# can wedge permanently on exactly the crash-window race this demo
|
||||||
|
# hit live (niklas/terdut-operator#3).
|
||||||
|
tag: v0.34.0
|
||||||
replicas: 1
|
replicas: 1
|
||||||
networking:
|
networking:
|
||||||
hostname: terdut-operator-demo.example
|
hostname: terdut-operator-demo.example
|
||||||
|
|||||||
Reference in New Issue
Block a user