bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vault: separate Gitea reconciler credentials
Some checks failed
Tests / Declarative: Post Actions failed: 3, passed: 265
Details

Browse Source
This commit is contained in:
jenkins 2026-08-13 18:46:47 -03:00
parent ed8a3c0f91
commit 5ee80f44c6
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
services/vault/hermes-auth-role-bootstrap-job.yaml
View File

@ -3,7 +3,7 @@
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job
metadata: metadata:
name: vault-k8s-auth-hermes-6 name: vault-k8s-auth-hermes-7
namespace: vault namespace: vault
spec: spec:
backoffLimit: 2 backoffLimit: 2

2
services/vault/scripts/vault_k8s_auth_configure.sh
View File

@ -226,7 +226,7 @@ write_policy_and_role "planka" "planka" "planka-vault" \
write_policy_and_role "bstein-dev-home" "bstein-dev-home" "bstein-dev-home,bstein-dev-home-vault-sync" \ write_policy_and_role "bstein-dev-home" "bstein-dev-home" "bstein-dev-home,bstein-dev-home-vault-sync" \
"portal/* shared/chat-ai-keys-runtime shared/portal-e2e-client shared/postmark-relay mailu/mailu-initial-account-secret shared/harbor-pull" "" "portal/* shared/chat-ai-keys-runtime shared/portal-e2e-client shared/postmark-relay mailu/mailu-initial-account-secret shared/harbor-pull" ""
write_policy_and_role "gitea" "gitea" "gitea-vault" \ write_policy_and_role "gitea" "gitea" "gitea-vault" \
"gitea/*" "hermes/developer-gitea" "gitea/*" "hermes/developer-gitea gitea/atlas-reconciler"
write_policy_and_role "vaultwarden" "vaultwarden" "vaultwarden-vault" \ write_policy_and_role "vaultwarden" "vaultwarden" "vaultwarden-vault" \
"vaultwarden/* mailu/mailu-initial-account-secret" "" "vaultwarden/* mailu/mailu-initial-account-secret" ""
write_policy_and_role "sso" "sso" "sso-vault,sso-vault-sync,mas-secrets-ensure" \ write_policy_and_role "sso" "sso" "sso-vault,sso-vault-sync,mas-secrets-ensure" \