chore: setup access to enable all plugins, designated to tf-vault user (#94)

Co-authored-by: Ben Vincent <ben@unkin.net> Reviewed-on: #94
2026-07-18 14:42:02 +10:00
parent 7da23d47fe
commit b825fdebf7
2 changed files with 16 additions and 19 deletions
@@ -0,0 +1,16 @@
+# Allow the vault deployer to import (register/deregister) plugin in the catalog
+---
+rules:
+  - path: "sys/plugins/catalog/*"
+    capabilities:
+      - create
+      - read
+      - update
+      - delete
+      - sudo
+
+auth:
+  approle:
+    - tf_vault
+  k8s/au/syd1:
+    - woodpecker_terraform_vault