ms2k/quorate
SHA256
Watch
0
Code Releases Activity

ce7cb702218693d08ea6d83464d2457c9250027c

Browse source
This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c
1 changed files with 145336 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

22
terraform/internal/vault/agentgateway.tf Normal file
View file

@ -0,0 +1,22 @@
resource "vault_policy" "agentgateway" {
name = "agentgateway"
policy = <<-EOT
path "secret/data/agentgateway/*" {
capabilities = ["read"]
}
path "secret/data/quay/robots/cluster_pull" {
capabilities = ["read"]
}
EOT
}
resource "vault_kubernetes_auth_backend_role" "agentgateway" {
backend = vault_auth_backend.kubernetes.path
role_name = "agentgateway"
bound_service_account_names = ["agentgateway-vso"]
bound_service_account_namespaces = ["agentgateway-system"]
token_policies = [vault_policy.agentgateway.name]
token_ttl = 3600
token_max_ttl = 3600
}