diff --git a/auth_approle_packer_builder.tf b/auth_approle_packer_builder.tf index 32858d0..2caa630 100644 --- a/auth_approle_packer_builder.tf +++ b/auth_approle_packer_builder.tf @@ -1,12 +1,12 @@ resource "vault_approle_auth_backend_role" "packer_builder" { - role_name = "terraform_nomad" + role_name = "packer_builder" bind_secret_id = false token_policies = [ "default_access", "packer_builder", ] - token_ttl = 60 - token_max_ttl = 120 + token_ttl = 300 # builds can take a few minutes + token_max_ttl = 600 token_bound_cidrs = [ "10.10.12.200/32", "198.18.13.67/32", diff --git a/policies/kv/service/packer/packer-builder.hcl b/policies/kv/service/packer/packer-builder.hcl deleted file mode 100644 index 79b114f..0000000 --- a/policies/kv/service/packer/packer-builder.hcl +++ /dev/null @@ -1,3 +0,0 @@ -path "kv/data/service/packer/builder/env" { - capabilities = ["read"] -}