From f0c6994ad9fc5065475c3be6d4b9de82499b08a3 Mon Sep 17 00:00:00 2001
From: Enrico Risa <enrico.risa@gmail.com>
Date: Mon, 27 Jul 2026 12:25:53 +0200
Subject: [PATCH] feat: add siglet mapping in jwtlet activity

---
 agent/orchestration/jwtletagent/activity/activity.go      | 1 +
 agent/orchestration/jwtletagent/activity/activity_test.go | 1 +
 2 files changed, 2 insertions(+)

diff --git a/agent/orchestration/jwtletagent/activity/activity.go b/agent/orchestration/jwtletagent/activity/activity.go
index 1126497..2947018 100644
--- a/agent/orchestration/jwtletagent/activity/activity.go
+++ b/agent/orchestration/jwtletagent/activity/activity.go
@@ -51,6 +51,7 @@ const (
 var vaultServiceAccounts = []string{
 	"controlplane",
 	"identityhub",
+	"siglet-sa",
 }
 
 // agentScopes is the exact set of narrow scopes the CFM agents request against a participant
diff --git a/agent/orchestration/jwtletagent/activity/activity_test.go b/agent/orchestration/jwtletagent/activity/activity_test.go
index 48bd455..68c7da0 100644
--- a/agent/orchestration/jwtletagent/activity/activity_test.go
+++ b/agent/orchestration/jwtletagent/activity/activity_test.go
@@ -112,6 +112,7 @@ func TestProcessDeploy_UsesConfiguredNamespace(t *testing.T) {
 		"system:serviceaccount:test-ns:cfm-agents",
 		"system:serviceaccount:test-ns:controlplane",
 		"system:serviceaccount:test-ns:identityhub",
+		"system:serviceaccount:test-ns:siglet-sa",
 	}, identifiers)
 }