unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: unkin:cd9c006203d6d5c3a31445683287a9f902577673
Branches Tags
unkin:master
..
compare: unkin:99b643b458ec5ef4c29cf5568d6e6fd031b0f4cf
Branches Tags
unkin:master

No commits in common. "cd9c006203d6d5c3a31445683287a9f902577673" and "99b643b458ec5ef4c29cf5568d6e6fd031b0f4cf" have entirely different histories.
cd9c006203 ... 99b643b458

2 changed files with 6 additions and 3 deletions
Show Stats Expand all files Collapse all files

6
auth_approle_packer_builder.tf
View File

@ -1,12 +1,12 @@
resource "vault_approle_auth_backend_role" "packer_builder" { resource "vault_approle_auth_backend_role" "packer_builder" {
role_name = "packer_builder" role_name = "terraform_nomad"
bind_secret_id = false bind_secret_id = false
token_policies = [ token_policies = [
"default_access", "default_access",
"packer_builder", "packer_builder",
] ]
token_ttl = 300 # builds can take a few minutes token_ttl = 60
token_max_ttl = 600 token_max_ttl = 120
token_bound_cidrs = [ token_bound_cidrs = [
"10.10.12.200/32", "10.10.12.200/32",
"198.18.13.67/32", "198.18.13.67/32",

3
policies/kv/service/packer/packer-builder.hcl Normal file
View File

@ -0,0 +1,3 @@
path "kv/data/service/packer/builder/env" {
capabilities = ["read"]
}