invalidate openbao token at the end of ci run

2026-05-29 01:07:06 +02:00
parent 7bf9b2da4f
commit 864859a5a0
2 changed files with 14 additions and 0 deletions
@@ -56,3 +56,10 @@ steps:
        - OCI_VERSION=${CI_COMMIT_TAG}
      # Credentials (PLUGIN_USERNAME / PLUGIN_PASSWORD) come from OpenBao.
      env_file: /woodpecker/registry.env
+  - name: Invalidate OpenBao token
+    image: quay.io/openbao/openbao:2.5.4
+    environment:
+      VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
+    commands:
+      - export VAULT_TOKEN=$(cat /woodpecker/.vault_id)
+      - bao write -f auth/token/revoke-self