unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: unkin:391c77d30b148d92f4df063ca053a135a554774f
Branches Tags
unkin:master
..
compare: unkin:605aa204a96898c335d41ec4967b91f71dacb494
Branches Tags
unkin:master

No commits in common. "391c77d30b148d92f4df063ca053a135a554774f" and "605aa204a96898c335d41ec4967b91f71dacb494" have entirely different histories.
391c77d30b ... 605aa204a9

3 changed files with 0 additions and 23 deletions
Show Stats Expand all files Collapse all files

17
auth_kubernetes_roles.tf
View File

@ -78,20 +78,3 @@ resource "vault_kubernetes_auth_backend_role" "ceph-csi" {
]
audience = "vault"
}
resource "vault_kubernetes_auth_backend_role" "media-apps" {
backend = vault_auth_backend.kubernetes.path
role_name = "media-apps"
bound_service_account_names = [
"media-apps-vault-reader",
]
bound_service_account_namespaces = [
"media-apps",
]
token_ttl = 60
token_policies = [
"kv/service/media-apps/radarr/read",
"kv/service/media-apps/sonarr/read",
]
audience = "vault"
}

3
policies/kv/service/media-apps/radarr/read.hcl
View File

@ -1,3 +0,0 @@
path "kv/data/service/media-apps/radarr" {
capabilities = ["read"]
}

3
policies/kv/service/media-apps/sonarr/read.hcl
View File

@ -1,3 +0,0 @@
path "kv/data/service/media-apps/sonarr" {
capabilities = ["read"]
}