Ben Vincent
14790f8277
- import pki, ssh, kv, rundeck engines - deploy all roles from terraform - deploy all policies from terraform - deploy all approles from terraform
18 lines
361 B
HCL
18 lines
361 B
HCL
resource "vault_approle_auth_backend_role" "sshsigner" {
|
|
role_name = "sshsigner"
|
|
bind_secret_id = false
|
|
token_policies = [
|
|
"sshsigner",
|
|
"sshca_signhost"
|
|
]
|
|
token_ttl = 30
|
|
token_max_ttl = 30
|
|
token_bound_cidrs = [
|
|
"198.18.17.3/32",
|
|
"198.18.13.32/32",
|
|
"198.18.13.33/32",
|
|
"198.18.13.34/32",
|
|
"198.18.13.46/32"
|
|
]
|
|
}
|