add agent-observability kubernetes creds role and policy

2026-09-27 00:36:28 +10:00
parent b576524553
commit 1887727a04
2 changed files with 18 additions and 0 deletions
@@ -0,0 +1,6 @@
+allowed_kubernetes_namespaces:
+  - "vm-system"
+  - "observability"
+  - "logging"
+service_account_name: "agent-observability"
+extra_labels: {}
@@ -0,0 +1,12 @@
+# Allow access to agent-observability Kubernetes credentials
+---
+rules:
+  - path: "kubernetes/au/syd1/creds/agent-observability"
+    capabilities:
+      - update
+
+auth:
+  ldap:
+    - kubernetes_au_syd1_cluster_operator
+  approle:
+    - agents