Merge pull request 'chore: add artifactapi k8s role' (#61) from benvin/artifactapi into master

Reviewed-on: #61
2026-03-06 18:57:05 +11:00
parent 14a258de7d d9e07e432e
commit f7d1330c37
2 changed files with 17 additions and 0 deletions
@@ -0,0 +1,7 @@
 bound_service_account_names:
  - default
 bound_service_account_namespaces:
  - artifactapi
 token_ttl: 600
 token_max_ttl: 600
 audience: vault
@@ -0,0 +1,10 @@
 # Allow reading environment variables for artifactapi
 ---
 rules:
  - path: "kv/data/service/artifactapi/environment"
    capabilities:
      - read
 auth:
  k8s/au/syd1:
    - artifactapi