unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'feat: add terraform_nomad role' (#5) from neoloc/nomad into master

Browse Source 
Reviewed-on: https://git.query.consul/unkin/terraform-vault/pulls/5
This commit is contained in:
Ben Vincent 2024-12-28 17:15:04 +11:00
commit aa518c1b44
3 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
auth_approle_terraform_nomad.tf Normal file
View File

@ -0,0 +1,15 @@
resource "vault_approle_auth_backend_role" "terraform_nomad" {
role_name = "terraform_nomad"
bind_secret_id = false
token_policies = [
"default_access",
"nomad",
]
token_ttl = 60
token_max_ttl = 120
token_bound_cidrs = [
"10.10.12.200/32",
"198.18.13.67/32",
"198.18.13.68/32",
]
}

1
policies.tf
View File

@ -13,6 +13,7 @@ locals {
"policies/sshca", "policies/sshca",
"policies/kv/service/glauth/services", "policies/kv/service/glauth/services",
"policies/kv/service/puppetapi", "policies/kv/service/puppetapi",
"policies/kv/service/terraform",
] ]
} }

3
policies/kv/service/terraform/nomad.hcl Normal file
View File

@ -0,0 +1,3 @@
path "kv/data/service/terraform/nomad" {
capabilities = ["read"]
}