From dc18f2e5560197d7c6d96cf9e87dca975ac8b173 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Mon, 28 Sep 2026 22:37:24 +1000 Subject: [PATCH] Add logging/vlogs kubernetes auth role Bind the templated kv/kubernetes policy to it --- config/auth_kubernetes_role/k8s/au/syd1/logging_vlogs.yaml | 7 +++++++ policies/kv/kubernetes/default.yaml | 1 + 2 files changed, 8 insertions(+) create mode 100644 config/auth_kubernetes_role/k8s/au/syd1/logging_vlogs.yaml diff --git a/config/auth_kubernetes_role/k8s/au/syd1/logging_vlogs.yaml b/config/auth_kubernetes_role/k8s/au/syd1/logging_vlogs.yaml new file mode 100644 index 0000000..eae4758 --- /dev/null +++ b/config/auth_kubernetes_role/k8s/au/syd1/logging_vlogs.yaml @@ -0,0 +1,7 @@ +bound_service_account_names: + - vlogs +bound_service_account_namespaces: + - logging +token_ttl: 600 +token_max_ttl: 600 +audience: vault diff --git a/policies/kv/kubernetes/default.yaml b/policies/kv/kubernetes/default.yaml index ebb93d2..08e7d85 100644 --- a/policies/kv/kubernetes/default.yaml +++ b/policies/kv/kubernetes/default.yaml @@ -14,3 +14,4 @@ rules: auth: k8s/au/syd1: - default + - logging_vlogs