terraform-vault/media-apps.yaml at 8070b6f66bba458a52799ab858e917b0d8a41d2a - terraform-vault - Gitea

unkin/terraform-vault

Ben Vincent 8070b6f66b feat: major restructuring in migration to terragrunt

- migrate from individual terraform files to config-driven terragrunt module structure
- add vault_cluster module with config discovery system
- replace individual .tf files with centralized config.hcl
- restructure auth and secret backends as configurable modules
- move auth roles and secret backends to yaml-based configuration
- convert policies from .hcl to .yaml format, add rules/auth definition
- add pre-commit hooks for yaml formatting and file cleanup
- add terragrunt cache to gitignore
- update makefile with terragrunt commands and format target

2026-01-26 23:02:44 +11:00

10 lines

228 B

YAML

Raw Blame History

 bound_service_account_names:
   - media-apps-vault-reader
 bound_service_account_namespaces:
   - media-apps
 token_ttl: 60
 token_policies:
   - kv/service/media-apps/radarr/read
   - kv/service/media-apps/sonarr/read
 audience: vault