Ben Vincent
5afd1ad9c1
- add rpmbuilder approle - add policies to acces gitea/github read-only tokens
17 lines
419 B
HCL
17 lines
419 B
HCL
resource "vault_approle_auth_backend_role" "rpmbuilder" {
|
|
role_name = "rpmbuilder"
|
|
bind_secret_id = false
|
|
token_policies = [
|
|
"kv/service/github/neoloc/tokens/read-only-token",
|
|
"kv/service/gitea/unkinben/tokens/read-only-packages",
|
|
]
|
|
token_ttl = 30
|
|
token_max_ttl = 30
|
|
token_bound_cidrs = [
|
|
"10.10.12.200/32",
|
|
"198.18.25.102/32",
|
|
"198.18.26.91/32",
|
|
"198.18.27.40/32",
|
|
]
|
|
}
|