- had duplicate role - change policy name to match approle - updated ttl as packer builds can take some time
16 lines
367 B
HCL
16 lines
367 B
HCL
resource "vault_approle_auth_backend_role" "packer_builder" {
|
|
role_name = "packer_builder"
|
|
bind_secret_id = false
|
|
token_policies = [
|
|
"default_access",
|
|
"packer_builder",
|
|
]
|
|
token_ttl = 300 # builds can take a few minutes
|
|
token_max_ttl = 600
|
|
token_bound_cidrs = [
|
|
"10.10.12.200/32",
|
|
"198.18.13.67/32",
|
|
"198.18.13.68/32",
|
|
]
|
|
}
|