resource "vault_approle_auth_backend_role" "certmanager" {
  role_name      = "certmanager"
  bind_secret_id = false
  token_policies = ["certmanager"]
  token_ttl      = 30
  token_max_ttl  = 30
  token_bound_cidrs = [
    "198.18.17.3/32",
    "198.18.13.32/32",
    "198.18.13.33/32",
    "198.18.13.34/32",
    "198.18.13.46/32",
    "198.18.25.5/32",  # ausyd1nxvm2052.main.unkin.net
    "198.18.26.3/32",  # ausyd1nxvm2053.main.unkin.net
    "198.18.27.89/32", # ausyd1nxvm2054.main.unkin.net
    "198.18.28.8/32",  # ausyd1nxvm2055.main.unkin.net
    "198.18.29.33/32", # ausyd1nxvm2056.main.unkin.net
  ]
}