unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Add cephrgw-operator k8s auth role + dashboard-credentials policy #95

Closed
unkinben wants to merge 1 commits from benvin/add-cephrgw-operator-role into master
pull from: benvin/add-cephrgw-operator-role
merge into: unkin:master
Conversation 0 Commits 1 Files Changed 2
+17

1 Commits

Author SHA1 Message Date
benvin 3624450baa Add cephrgw-operator k8s auth role + dashboard-credentials read policy
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details 
The cephrgw-operator reads its Ceph dashboard credentials from Vault via VSO
and needs a Kubernetes auth role bound to its ServiceAccount plus a policy
granting read on the KV path.

- Add config/auth_kubernetes_role/k8s/au/syd1/cephrgw-operator.yaml binding
  ServiceAccount cephrgw-operator in namespace cephrgw-system (audience vault).
- Add policies/kv/service/cephrgw/dashboard-credentials/read.yaml granting
  read on kv/data/service/cephrgw/dashboard-credentials to that role via the
  k8s/au/syd1 auth mount.
 2026-07-18 16:12:42 +10:00