unkin/terraform-vault
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Vault access for forgebot service #76

Closed
unkinben wants to merge 7 commits from feature/forgebot-vault-access into master
pull from: feature/forgebot-vault-access
merge into: unkin:master
Conversation 0 Commits 7 Files Changed 2
+17
2 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/auth_kubernetes_role/k8s/au/syd1/forgebot.yaml
+8
View File
@@ -0,0 +1,8 @@
bound_service_account_names:
- default
- forgebot-operator
bound_service_account_namespaces:
- forgebot
token_ttl: 600
token_max_ttl: 600
audience: vault
policies/kv/service/forgebot/config/read.yaml
+9
View File
@@ -0,0 +1,9 @@
---
rules:
- path: "kv/data/kubernetes/namespace/forgebot/*"
capabilities:
- read
auth:
k8s/au/syd1:
- forgebot