bound_service_account_names: - externaldns bound_service_account_namespaces: - externaldns token_ttl: 60 token_policies: - kv/service/kubernetes/au/syd1/externaldns/tsig/read audience: vault