hotfix(privatek8s/infra.ci) restrict top-level credential scope for t…

…he kubernetes cloud SA Signed-off-by: Damien Duportal <[email protected]>
jenkins-infra · Jun 24, 2024 · bc36808 · bc36808
1 parent acf088d
commit bc36808
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/jenkins_infra.ci.jenkins.io.yaml b/config/jenkins_infra.ci.jenkins.io.yaml
@@ -112,7 +112,7 @@ controller:
                 - string:
                     description: "Token of the Service Account account 'jenkins-agent' on the Kubernetes cluster 'infraci.jenkins.io-agents-1'"
                     id: "infraci.jenkins.io-agents-1-jenkins-agent-sa-token"
-                    scope: GLOBAL
+                    scope: SYSTEM
                     secret: "${INFRACIJENKINSIO_AGENTS_1_TOKEN}"
       agent-settings: |
         jenkins: