Four-Lights
/
bouwroute-devops
1
0
Fork 0
Code Issues 3 Pull Requests Packages Projects Releases Wiki Activity

update vault token

This commit is contained in:
Thomas Rijpstra 2024-09-20 21:55:43 +02:00
parent a51635cebe
commit 99c058f9ec
Signed by: thomas
SSH Key Fingerprint: SHA256:sFF5HPNPaaW14qykTkmRi1FGGO0YMUPBenlKOqepUpw
2 changed files with 20 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
infra/clusters/management/bootstrap/stage2-harden/main.tf
View File

@ -177,6 +177,14 @@ path "auth/token/renew-self" {
capabilities = ["update"] capabilities = ["update"]
} }
path "auth/token/lookup-accessor" {
capabilities = ["update"]
}
path "auth/token/renew-accessor" {
capabilities = ["update"]
}
# Add other necessary permissions as needed # Add other necessary permissions as needed
EOT EOT
} }
@ -184,6 +192,7 @@ EOT
resource "vault_token" "management" { resource "vault_token" "management" {
policies = [vault_policy.management.name] policies = [vault_policy.management.name]
renewable = true renewable = true
ttl = "1h" ttl = "24h"
period = "15m" renew_min_lease = "12h"
renew_increment = "24h"
} }

11
infra/modules/cluster/main.tf
View File

@ -105,6 +105,12 @@ path "auth/token/lookup-self" {
path "auth/token/renew-self" { path "auth/token/renew-self" {
capabilities = ["update"] capabilities = ["update"]
} }
path "auth/token/lookup-accessor" {
capabilities = ["update"]
}
path "auth/token/renew-accessor" {
capabilities = ["update"]
}
# Add other necessary permissions # Add other necessary permissions
EOT EOT
} }
@ -112,6 +118,7 @@ EOT
resource "vault_token" "cluster" { resource "vault_token" "cluster" {
policies = [vault_policy.cluster.name] policies = [vault_policy.cluster.name]
renewable = true renewable = true
ttl = "1h" ttl = "24h"
period = "15m" renew_min_lease = "12h"
renew_increment = "24h"
} }