unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add kubernetes ldap groups #51

Merged
unkinben merged 1 commits from benvin/kubernetes_ldap_groups into master 2026-02-14 19:48:56 +11:00
Conversation 0 Commits 1 Files Changed 6 +15 -4
unkinben commented 2026-02-14 19:48:39 +11:00
Owner
Copy Link

vault's terraform approle doesnt need to access all of these kubernetes
roles, it was just added as a placeholder and access to the kubernetes
roles was via the vault_admin to-much-access account. this is an
effort to roll back that and make access more targeted.

  • add kubernetes* ldap groups for specific cluster/role combinations
  • remove tf_vault from kubernetes* roles
vault's terraform approle doesnt need to access all of these kubernetes roles, it was just added as a placeholder and access to the kubernetes roles was via the `vault_admin` to-much-access account. this is an effort to roll back that and make access more targeted. - add kubernetes* ldap groups for specific cluster/role combinations - remove tf_vault from kubernetes* roles
unkinben added 1 commit 2026-02-14 19:48:39 +11:00 
vault's terraform approle doesnt need to access all of these kubernetes
roles, it was just added as a placeholder and access to the kubernetes
roles was via the `vault_admin` to-much-access account. this is an
effort to roll back that and make access more targeted.

- add kubernetes* ldap groups for specific cluster/role combinations
- remove tf_vault from kubernetes* roles
unkinben merged commit 3fb5a64a17 into master 2026-02-14 19:48:56 +11:00
unkinben deleted branch benvin/kubernetes_ldap_groups 2026-02-14 19:48:56 +11:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: unkin/terraform-vault#51
No description provided.
Delete Branch "benvin/kubernetes_ldap_groups"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?