auth_approle_packer_builder.tf

@@ -1,12 +1,12 @@
 resource "vault_approle_auth_backend_role" "packer_builder" {
-  role_name      = "packer_builder"
+  role_name      = "terraform_nomad"
   bind_secret_id = false
   token_policies = [
     "default_access",
     "packer_builder",
   ]
-  token_ttl     = 300 # builds can take a few minutes
-  token_max_ttl = 600
+  token_ttl     = 60
+  token_max_ttl = 120
   token_bound_cidrs = [
     "10.10.12.200/32",
     "198.18.13.67/32",

policies/kv/service/packer/packer-builder.hcl

@@ -0,0 +1,3 @@
+path "kv/data/service/packer/builder/env" {
+  capabilities = ["read"]
+}