found kubernetes vaultauth resources never picking up new policies, because they would infinitely renew their token. - set default max token length for roles to 1 day - changed all existing role token_max_ttl to match their token_ttl
8 lines
156 B
YAML
8 lines
156 B
YAML
bound_service_account_names:
|
|
- media-apps-vault-reader
|
|
bound_service_account_namespaces:
|
|
- media-apps
|
|
token_ttl: 600
|
|
token_max_ttl: 600
|
|
audience: vault
|