Merge pull request 'chore: fix policies for rpmbuilder' (#35) from benvin/fix_rpmbuilder into master

Reviewed-on: #35
This commit is contained in:
Ben Vincent 2025-11-30 21:24:52 +11:00
commit 26b3ee84d6

View File

@ -2,8 +2,8 @@ resource "vault_approle_auth_backend_role" "rpmbuilder" {
role_name = "rpmbuilder" role_name = "rpmbuilder"
bind_secret_id = false bind_secret_id = false
token_policies = [ token_policies = [
"kv/service/github/neoloc/tokens/read-only-token", "kv/service/github/neoloc/tokens/read-only-token/read",
"kv/service/gitea/unkinben/tokens/read-only-packages", "kv/service/gitea/unkinben/tokens/read-only-packages/read",
] ]
token_ttl = 30 token_ttl = 30
token_max_ttl = 30 token_max_ttl = 30