unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: add rancher role #44

Merged
unkinben merged 1 commits from benvin/rancher_role into master 2026-01-30 19:46:19 +11:00
Conversation 0 Commits 1 Files Changed 2 +16
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
config/auth_kubernetes_role/k8s/au/syd1/rancher.yaml Normal file
View File

@ -0,0 +1,6 @@
bound_service_account_names:
- rancher
bound_service_account_namespaces:
- default
token_ttl: 60
audience: vault

10
policies/kv/service/kubernetes/au/syd1/rancher/bootstrap-password/read.yaml Normal file
View File

@ -0,0 +1,10 @@
# Allow reading ExternalDNS TSIG keys
---
rules:
- path: "kv/data/service/kubernetes/au/syd1/rancher/bootstrap-password"
capabilities:
- read
auth:
k8s/au/syd1:
- rancher