unkinben
9cbac6d3ef
- update makefile to enable kubernetes auth or roleid auth - add plan workflow - update all policies to allow the terraform-vault kubernetes role
25 lines
414 B
YAML
25 lines
414 B
YAML
# Allow access to manage secret engines (mount, unmount, update)
|
|
---
|
|
rules:
|
|
- path: "sys/mounts/*"
|
|
capabilities:
|
|
- create
|
|
- update
|
|
- delete
|
|
- read
|
|
- list
|
|
- path: "sys/mounts-tune/*"
|
|
capabilities:
|
|
- update
|
|
- read
|
|
- path: "sys/mounts"
|
|
capabilities:
|
|
- read
|
|
- list
|
|
|
|
auth:
|
|
approle:
|
|
- tf_vault
|
|
k8s/au/syd1:
|
|
- woodpecker_terraform_vault
|