From 0ae534e387a8d22ee93ee0c178acc7543e143b68 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Mon, 2 Feb 2026 17:15:35 -0300 Subject: [PATCH] vault: add default k8s audience --- services/vault/k8s-auth-config-cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/vault/k8s-auth-config-cronjob.yaml b/services/vault/k8s-auth-config-cronjob.yaml index 59bb987..ab73bef 100644 --- a/services/vault/k8s-auth-config-cronjob.yaml +++ b/services/vault/k8s-auth-config-cronjob.yaml @@ -44,7 +44,7 @@ spec: - name: VAULT_K8S_ROLE_TTL value: 1h - name: VAULT_K8S_BOUND_AUDIENCES - value: https://kubernetes.default.svc.cluster.local,k3s + value: "https://kubernetes.default.svc,https://kubernetes.default.svc.cluster.local,k3s" - name: VAULT_K8S_ISSUER value: https://kubernetes.default.svc.cluster.local - name: VAULT_K8S_DISABLE_ISS_VALIDATION