unkinben
48a4fd0dd1
ci/woodpecker/pr/pre-commit Pipeline was successful
- add default kubernetes auth role - add templated access kv/kubernetes/*
17 lines
713 B
YAML
17 lines
713 B
YAML
# Templated access to kv secrets for kubernetes
|
|
#
|
|
# kv/kubernetes/namespace/<namespace>/<service_account>
|
|
# kv/kubernetes/cluster/<cluster>/<namespace>/<service_account>
|
|
---
|
|
rules:
|
|
- path: "kv/data/kubernetes/namespace/{{identity.entity.aliases.auth_kubernetes_ac24966b.metadata.service_account_namespace}}/{{identity.entity.aliases.auth_kubernetes_ac24966b.metadata.service_account_name}}/*"
|
|
capabilities:
|
|
- read
|
|
- path: "kv/data/kubernetes/cluster/au/syd1/{{identity.entity.aliases.auth_kubernetes_ac24966b.metadata.service_account_namespace}}/{{identity.entity.aliases.auth_kubernetes_ac24966b.metadata.service_account_name}}/*"
|
|
capabilities:
|
|
- read
|
|
|
|
auth:
|
|
k8s/au/syd1:
|
|
- default
|