unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: enable access to puppetcerts

Browse Source 
- enable the terraform-incus repo to access puppet certs
This commit is contained in:
Ben Vincent 2025-04-27 16:24:24 +10:00
parent 4aac926c6a
commit d508dcd4a9
3 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
auth_approle_terraform_incus.tf
View File

@ -4,6 +4,7 @@ resource "vault_approle_auth_backend_role" "terraform_incus" {
token_policies = [ token_policies = [
"default_access", "default_access",
"incus", "incus",
"terraform_puppet_cert",
] ]
token_ttl = 60 token_ttl = 60
token_max_ttl = 120 token_max_ttl = 120

1
policies.tf
View File

@ -15,6 +15,7 @@ locals {
"policies/kv/service/glauth/services", "policies/kv/service/glauth/services",
"policies/kv/service/incus", "policies/kv/service/incus",
"policies/kv/service/packer", "policies/kv/service/packer",
"policies/kv/service/puppet/certificates",
"policies/kv/service/puppetapi", "policies/kv/service/puppetapi",
"policies/kv/service/terraform", "policies/kv/service/terraform",
] ]

6
policies/kv/service/puppet/certificates/terraform_puppet_cert.hcl Normal file
View File

@ -0,0 +1,6 @@
path "kv/data/service/puppet/certificates/terraform" {
capabilities = ["read"]
}
path "kv/data/service/puppet/certificates/ca" {
capabilities = ["read"]
}