arcodange-org/tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vault kvv1/ovh/<app> permission
All checks were successful
Helm Charts / Detect changed charts (push) Successful in 20s
Details
Helm Charts / Library charts tool (push) Has been skipped
Details
Helm Charts / Application charts pgcat (push) Has been skipped
Details

Browse Source
This commit is contained in:
Gabriel Radureau
2025-11-04 10:11:05 +01:00
parent 24c3d92522
commit 98395dbe5d
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
hashicorp-vault/iac/modules/app_policy/main.tf
View File

@@ -27,13 +27,14 @@ data "vault_policy_document" "ops" {
path = "kvv1/google/credentials" path = "kvv1/google/credentials"
capabilities = ["read"] capabilities = ["read"]
} }
# read cloudflare credentials for terraform cloudflare backend # read cloudflare related secrets
rule { rule {
path = "kvv1/cloudflare/${local.name}*" path = "kvv1/cloudflare/${local.name}*"
capabilities = ["read", "list", "create", "update", "delete"] capabilities = ["read", "list", "create", "update", "delete"]
} }
# read ovh related secrets
rule { rule {
path = "kvv1/cloudflare/${local.name}*" path = "kvv1/ovh/${local.name}*"
capabilities = ["read", "list", "create", "update", "delete"] capabilities = ["read", "list", "create", "update", "delete"]
} }
# read tofu_module_reader gitea bot user ssh keys # read tofu_module_reader gitea bot user ssh keys