From 7c87e177e9a6203444243293360be532ea223caf Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Mon, 2 Feb 2026 17:15:35 -0300 Subject: [PATCH] vault: add default k8s audience --- services/vault/k8s-auth-config-cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/vault/k8s-auth-config-cronjob.yaml b/services/vault/k8s-auth-config-cronjob.yaml index 59bb987f..ab73bef0 100644 --- a/services/vault/k8s-auth-config-cronjob.yaml +++ b/services/vault/k8s-auth-config-cronjob.yaml @@ -44,7 +44,7 @@ spec: - name: VAULT_K8S_ROLE_TTL value: 1h - name: VAULT_K8S_BOUND_AUDIENCES - value: https://kubernetes.default.svc.cluster.local,k3s + value: "https://kubernetes.default.svc,https://kubernetes.default.svc.cluster.local,k3s" - name: VAULT_K8S_ISSUER value: https://kubernetes.default.svc.cluster.local - name: VAULT_K8S_DISABLE_ISS_VALIDATION