chore: add puppet k8s role
- add role and policies
This commit is contained in:
parent
f47804ffdf
commit
75e9db1aa6
6
config/auth_kubernetes_role/k8s/au/syd1/puppet.yaml
Normal file
6
config/auth_kubernetes_role/k8s/au/syd1/puppet.yaml
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
bound_service_account_names:
|
||||||
|
- default
|
||||||
|
bound_service_account_namespaces:
|
||||||
|
- puppet
|
||||||
|
token_ttl: 60
|
||||||
|
audience: vault
|
||||||
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
rules:
|
||||||
|
- path: "kv/data/service/puppet/puppetboard-secret-key"
|
||||||
|
capabilities:
|
||||||
|
- read
|
||||||
|
|
||||||
|
auth:
|
||||||
|
k8s/au/syd1:
|
||||||
|
- puppet
|
||||||
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
rules:
|
||||||
|
- path: "kv/data/service/puppet/puppetdb-postgresql-credentials"
|
||||||
|
capabilities:
|
||||||
|
- read
|
||||||
|
|
||||||
|
auth:
|
||||||
|
k8s/au/syd1:
|
||||||
|
- puppet
|
||||||
@ -3,6 +3,7 @@ rules:
|
|||||||
- apiGroups:
|
- apiGroups:
|
||||||
- ""
|
- ""
|
||||||
- "postgresql.cnpg.io"
|
- "postgresql.cnpg.io"
|
||||||
|
- "poolers.postgresql.cnpg.io"
|
||||||
- "cert-manager.io"
|
- "cert-manager.io"
|
||||||
- "rbac.authorization.k8s.io"
|
- "rbac.authorization.k8s.io"
|
||||||
- "batch"
|
- "batch"
|
||||||
|
|||||||
@ -3,6 +3,7 @@ rules:
|
|||||||
- apiGroups:
|
- apiGroups:
|
||||||
- ""
|
- ""
|
||||||
- "postgresql.cnpg.io"
|
- "postgresql.cnpg.io"
|
||||||
|
- "poolers.postgresql.cnpg.io"
|
||||||
- "cert-manager.io"
|
- "cert-manager.io"
|
||||||
- "rbac.authorization.k8s.io"
|
- "rbac.authorization.k8s.io"
|
||||||
- "batch"
|
- "batch"
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user