🤖 fix: revoke a CoderProvisioner key created at an intermediate control plane endpoint by ThomasK33 · Pull Request #413 · coder/coder-k8s

tests: show that a CoderProvisioner key at an intermediate endpoint is never revoked (#259)

ThomasK33

committed

b1625aa

fix: record every CoderProvisioner key with its endpoint and token source, and revoke it there (#259)

ThomasK33

committed

e9c111e

fix: rotate a key left unpublished at the target, keep the applied key on by-name deletes, and map an old HTTPS URL to the internal one (#259)

ThomasK33

committed

27c324f

fix: keep the IDs of an unpublished key until a create proves it gone, retry unconfirmed deletes, and count a deleted organization as gone (#259)

ThomasK33

committed

54c982f

fix: count Coder's 404 on the key list as gone in the by-name delete (#259)

ThomasK33

committed

77c3441

fix: replace a Secret key that a failed rotation left unpublished, and keep the current-URL fallback for older status (#259)

ThomasK33

committed

b25997e

tests: show that an ID-less CoderProvisioner key record deletes another provisioner's same-named key (#259)

ThomasK33

committed

488e3f0

Merge remote-tracking branch 'origin/main' into provisioner-intermediate-key-revoke

ThomasK33

committed

64594cd

fix: never delete a key by name for a CoderProvisioner key record without IDs, and report a same-named key with UnverifiedKeyKept (#259)

ThomasK33

committed

ee49817

fix: keep UnverifiedKeyKept through a failed key lookup, and name both key IDs in the pendingKeys docs (#259)

ThomasK33

committed

3b29933

fix: rebuild the UnverifiedKeyKept report from every pending entry without key IDs on each reconcile (#259)

ThomasK33

committed

45e6405

Navigation Menu

Repository navigation

🤖 fix: revoke a CoderProvisioner key created at an intermediate control plane endpoint - #413

🤖 fix: revoke a CoderProvisioner key created at an intermediate control plane endpoint#413
ThomasK33 merged 11 commits into
mainfrom
provisioner-intermediate-key-revoke

Commits on Oct 30, 2026

tests: show that a CoderProvisioner key at an intermediate endpoint is never revoked (#259)

fix: record every CoderProvisioner key with its endpoint and token source, and revoke it there (#259)

fix: rotate a key left unpublished at the target, keep the applied key on by-name deletes, and map an old HTTPS URL to the internal one (#259)

fix: keep the IDs of an unpublished key until a create proves it gone, retry unconfirmed deletes, and count a deleted organization as gone (#259)

fix: count Coder's 404 on the key list as gone in the by-name delete (#259)

fix: replace a Secret key that a failed rotation left unpublished, and keep the current-URL fallback for older status (#259)

tests: show that an ID-less CoderProvisioner key record deletes another provisioner's same-named key (#259)

Merge remote-tracking branch 'origin/main' into provisioner-intermediate-key-revoke

fix: never delete a key by name for a CoderProvisioner key record without IDs, and report a same-named key with UnverifiedKeyKept (#259)

fix: keep UnverifiedKeyKept through a failed key lookup, and name both key IDs in the pendingKeys docs (#259)

fix: rebuild the UnverifiedKeyKept report from every pending entry without key IDs on each reconcile (#259)