unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: move pgsql password to vault
All checks were successful
ci/woodpecker/pr/pre-commit Pipeline was successful
Details

Browse Source 
- no more storing secrets in configmaps
This commit is contained in:
Ben Vincent 2026-03-06 19:39:36 +11:00
parent f7d1330c37
commit 42351000ee
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
policies/kv/service/artifactapi/postgres-password/read.yaml Normal file
View File

@ -0,0 +1,10 @@
# Allow reading environment vars for postgres/artifactapi
---
rules:
- path: "kv/data/service/artifactapi/postgres-password"
capabilities:
- read
auth:
k8s/au/syd1:
- artifactapi