titan/atlas-iac
3
0
Fork 0
Code Issues Pull Requests 9 Actions Packages Projects Releases Wiki Activity

vault: scope Hermes task grants to the SCM broker

Browse Source
This commit is contained in:
jenkins 2026-09-13 14:26:54 -05:00
parent 17d70759e0
commit 4dd5d1fcf7
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
clusters/atlas/flux-system/applications/vault/kustomization.yaml
View File

@ -19,7 +19,7 @@ spec:
healthChecks:
- apiVersion: batch/v1
kind: Job
name: vault-k8s-auth-hermes-10
name: vault-k8s-auth-hermes-11
namespace: vault
dependsOn:
- name: longhorn

2
services/vault/hermes-auth-role-bootstrap-job.yaml
View File

@ -3,7 +3,7 @@
apiVersion: batch/v1
kind: Job
metadata:
name: vault-k8s-auth-hermes-10
name: vault-k8s-auth-hermes-11
namespace: vault
spec:
backoffLimit: 2

2
services/vault/scripts/vault_k8s_auth_configure.sh
View File

@ -294,7 +294,7 @@ vault_cmd write "auth/kubernetes/role/hermes-jenkins-token-seed" \
policies="hermes-jenkins-token-seed" \
ttl="${role_ttl}"
write_policy_and_role "hermes-scm-broker" "hermes-scm" "hermes-scm-broker" \
"hermes/developer-gitea" ""
"hermes/developer-gitea hermes/scm-task-grant" ""
write_policy_and_role "hermes-credential-sync" "hermes" "hermes-agent" \
"" "hermes/agent-tokens"
write_policy_and_role "hermes-node-ssh" "hermes" "hermes-node-ssh-access" \