Ben Vincent
8070b6f66b
- migrate from individual terraform files to config-driven terragrunt module structure - add vault_cluster module with config discovery system - replace individual .tf files with centralized config.hcl - restructure auth and secret backends as configurable modules - move auth roles and secret backends to yaml-based configuration - convert policies from .hcl to .yaml format, add rules/auth definition - add pre-commit hooks for yaml formatting and file cleanup - add terragrunt cache to gitignore - update makefile with terragrunt commands and format target
31 lines
971 B
YAML
31 lines
971 B
YAML
token_policies:
|
|
- "default_access"
|
|
- "approle_token_create"
|
|
- "auth/approle/approle_role_admin"
|
|
- "auth/approle/approle_role_login"
|
|
- "auth/kubernetes/k8s_auth_admin"
|
|
- "auth/ldap/ldap_admin"
|
|
- "auth/token/auth_token_create"
|
|
- "auth/token/auth_token_self"
|
|
- "auth/token/auth_token_roles_admin"
|
|
- "kubernetes/au/config_admin"
|
|
- "kubernetes/au/roles_admin"
|
|
- "kv/service/glauth/services/svc_vault_read"
|
|
- "kv/service/kubernetes/au/syd1/token_reviewer_jwt/read"
|
|
- "kv/service/kubernetes/au/syd1/service_account_jwt/read"
|
|
- "kv/service/vault/auth_backends_read"
|
|
- "pki_int/pki_int_roles_admin"
|
|
- "pki_root/pki_root_roles_admin"
|
|
- "ssh-host-signer/ssh-host-signer_roles_admin"
|
|
- "sshca/sshca_roles_admin"
|
|
- "sys/sys_auth_admin"
|
|
- "sys/sys_mounts_admin"
|
|
- "sys/sys_policy_admin"
|
|
- "transit/keys/admin"
|
|
token_ttl: 60
|
|
token_max_ttl: 120
|
|
bind_secret_id: false
|
|
token_bound_cidrs:
|
|
- "10.10.12.200/32"
|
|
use_deterministic_role_id: false
|