Ben Vincent
8070b6f66b
- migrate from individual terraform files to config-driven terragrunt module structure - add vault_cluster module with config discovery system - replace individual .tf files with centralized config.hcl - restructure auth and secret backends as configurable modules - move auth roles and secret backends to yaml-based configuration - convert policies from .hcl to .yaml format, add rules/auth definition - add pre-commit hooks for yaml formatting and file cleanup - add terragrunt cache to gitignore - update makefile with terragrunt commands and format target
9 lines
226 B
YAML
9 lines
226 B
YAML
key_type: ca
|
|
algorithm_signer: rsa-sha2-256
|
|
ttl: 315360000 # 87600 * 3600
|
|
allow_host_certificates: true
|
|
allow_user_certificates: false
|
|
allowed_domains: "main.unkin.net,consul"
|
|
allow_subdomains: true
|
|
allow_bare_domains: false
|