unkin/terraform-vault
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Grant terraform-incus approle read on encapi environment secret #97

Closed
unkinben wants to merge 1 commits from benvin/terraform-incus-encapi-token into master
pull from: benvin/terraform-incus-encapi-token
merge into: unkin:master
Conversation 1 Commits 1 Files Changed 1
+12
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 4ec2f92ca5 - Show all commits
policies/kv/service/terraform/incus-encapi-environment.yaml
+12
View File
@@ -0,0 +1,12 @@
# Allow the Terraform Incus runner to read the encapi environment secret
# (ENCAPI_WRITE_TOKEN), so `make apply` can dual-write ENC data to encapi via
# the encapi Terraform provider.
---
rules:
- path: "kv/data/kubernetes/namespace/encapi/default/environment"
capabilities:
- read
auth:
approle:
- terraform_incus