unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add packer-builder role #7

Merged
unkinben merged 1 commits from neoloc/packer-builder into master 2025-01-11 21:06:36 +11:00
Conversation 0 Commits 1 Files Changed 3 +19
3 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
auth_approle_packer_builder.tf Normal file
View File

@ -0,0 +1,15 @@
resource "vault_approle_auth_backend_role" "packer_builder" {
role_name = "terraform_nomad"
bind_secret_id = false
token_policies = [
"default_access",
"packer_builder",
]
token_ttl = 60
token_max_ttl = 120
token_bound_cidrs = [
"10.10.12.200/32",
"198.18.13.67/32",
"198.18.13.68/32",
]
}

1
policies.tf
View File

@ -13,6 +13,7 @@ locals {
"policies/sshca", "policies/sshca",
"policies/kv/service/glauth/services", "policies/kv/service/glauth/services",
"policies/kv/service/incus", "policies/kv/service/incus",
"policies/kv/service/packer",
"policies/kv/service/puppetapi", "policies/kv/service/puppetapi",
"policies/kv/service/terraform", "policies/kv/service/terraform",
] ]

3
policies/kv/service/packer/packer-builder.hcl Normal file
View File

@ -0,0 +1,3 @@
path "kv/data/service/packer/builder/env" {
capabilities = ["read"]
}