diff --git a/config/auth_kubernetes_role/k8s/au/syd1/logging_vlogs.yaml b/config/auth_kubernetes_role/k8s/au/syd1/logging_vlogs.yaml new file mode 100644 index 0000000..eae4758 --- /dev/null +++ b/config/auth_kubernetes_role/k8s/au/syd1/logging_vlogs.yaml @@ -0,0 +1,7 @@ +bound_service_account_names: + - vlogs +bound_service_account_namespaces: + - logging +token_ttl: 600 +token_max_ttl: 600 +audience: vault diff --git a/policies/kv/kubernetes/default.yaml b/policies/kv/kubernetes/default.yaml index ebb93d2..08e7d85 100644 --- a/policies/kv/kubernetes/default.yaml +++ b/policies/kv/kubernetes/default.yaml @@ -14,3 +14,4 @@ rules: auth: k8s/au/syd1: - default + - logging_vlogs