unkinben
7cafafd483
found kubernetes vaultauth resources never picking up new policies, because they would infinitely renew their token. - set default max token length for roles to 1 day - changed all existing role token_max_ttl to match their token_ttl
10 lines
511 B
Terraform
10 lines
511 B
Terraform
resource "vault_kubernetes_auth_backend_role" "role" {
|
|
backend = var.backend
|
|
role_name = var.role_name
|
|
bound_service_account_names = var.bound_service_account_names
|
|
bound_service_account_namespaces = var.bound_service_account_namespaces
|
|
token_ttl = var.token_ttl
|
|
token_max_ttl = var.token_max_ttl
|
|
token_policies = var.token_policies
|
|
audience = var.audience
|
|
} |