using service specific tokens

syedhaseebahmed · haseebsyed12 · commit b617687c29fd · 2025-10-07T17:11:14.000+05:30
diff --git a/components/nautobot/secretstore-nautobot.yaml b/components/nautobot/secretstore-nautobot.yaml
@@ -26,6 +26,9 @@ rules:
   - watch
   resourceNames:
   - nautobot-superuser
+  - ansible-token
+  - openstack-token
+  - workflow-token
 - apiGroups:
   - authorization.k8s.io
   resources:
diff --git a/workflows/argo-events/secrets/nautobot-token.yaml b/workflows/argo-events/secrets/nautobot-token.yaml
@@ -21,8 +21,8 @@ spec:
   data:
   - secretKey: token
     remoteRef:
-      key: nautobot-superuser
-      property: apitoken
+      key: workflow-token
+      property: token
       # necessary to avoid argoproj/argo-cd#13004
       conversionStrategy: Default
       decodingStrategy: None
diff --git a/workflows/openstack/secrets/nautobot-token.yaml b/workflows/openstack/secrets/nautobot-token.yaml
@@ -21,8 +21,8 @@ spec:
   data:
   - secretKey: token
     remoteRef:
-      key: nautobot-superuser
-      property: apitoken
+      key: openstack-token
+      property: token
       # necessary to avoid argoproj/argo-cd#13004
       conversionStrategy: Default
       decodingStrategy: None
