feat: add identity secrets
- add kubernetes auth role for identity namespace - add policy to access openldap bootstrap credentials
This commit is contained in:
parent
3fb5a64a17
commit
90b765d713
6
config/auth_kubernetes_role/k8s/au/syd1/identity.yaml
Normal file
6
config/auth_kubernetes_role/k8s/au/syd1/identity.yaml
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
bound_service_account_names:
|
||||||
|
- default
|
||||||
|
bound_service_account_namespaces:
|
||||||
|
- identity
|
||||||
|
token_ttl: 60
|
||||||
|
audience: vault
|
||||||
10
policies/kv/service/openldap/ldap_admin_password/read.yaml
Normal file
10
policies/kv/service/openldap/ldap_admin_password/read.yaml
Normal file
@ -0,0 +1,10 @@
|
|||||||
|
# Allow reading Radarr configuration
|
||||||
|
---
|
||||||
|
rules:
|
||||||
|
- path: "kv/data/service/openldap/ldap_admin_password"
|
||||||
|
capabilities:
|
||||||
|
- read
|
||||||
|
|
||||||
|
auth:
|
||||||
|
k8s/au/syd1:
|
||||||
|
- identity
|
||||||
Loading…
Reference in New Issue
Block a user