Grant the puppet k8s role PKI issue and SSH host signing

2026-09-22 22:32:52 +10:00
2 changed files with 24 additions and 0 deletions
@@ -0,0 +1,12 @@
 # Allow the puppet catalog compilers to issue host certificates
 # via certmanager during catalog compilation
 ---
 rules:
  - path: "pki_int/issue/servers_default"
    capabilities:
      - create
      - update
 auth:
  k8s/au/syd1:
    - puppet
@@ -0,0 +1,12 @@
 # Allow the puppet catalog compilers to sign SSH host certificates
 # via sshsignhost during catalog compilation
 ---
 rules:
  - path: "sshca/sign/signhost"
    capabilities:
      - create
      - update
 auth:
  k8s/au/syd1:
    - puppet