invalidate openbao token at the end of ci run

2026-05-29 01:07:06 +02:00
parent 7bf9b2da4f
commit 864859a5a0
2 changed files with 14 additions and 0 deletions
@@ -61,3 +61,10 @@ steps:
      - git tag -a "$TAG" -m "Automated release for Tailscale $TS"
      - git push "https://woodpecker:$GIT_TOKEN@gitea.lumpiasty.xyz/lumpiasty/mikrotik-tailscale.git" "$TAG"
      - echo "Pushed $TAG"
+  - name: Invalidate OpenBao token
+    image: quay.io/openbao/openbao:2.5.4
+    environment:
+      VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
+    commands:
+      - export VAULT_TOKEN=$(cat /woodpecker/.vault_id)
+      - bao write -f auth/token/revoke-self