titan/atlas-iac
3
0
Fork 0
Code Issues Pull Requests 9 Actions Packages Projects Releases Wiki Activity

vault: isolate Hermes node access identity

Browse Source
This commit is contained in:
jenkins 2026-08-15 13:55:17 -03:00
parent c7dc81c0c3
commit 86298cb9dc
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
services/vault/scripts/vault_k8s_auth_configure.sh
View File

@ -257,6 +257,8 @@ write_policy_and_role "hermes" "hermes" "hermes-vault,hermes-triage" \
"hermes/triage-oidc hermes/agent-tokens" ""
write_policy_and_role "hermes-agent" "hermes" "hermes-agent,hermes-switchyard" \
"hermes/agent-oidc hermes/agent-tokens hermes/chat-telegram hermes/developer-keycloak hermes/developer-gitea hermes/developer-harbor hermes/developer-jenkins hermes/developer-ssh" ""
write_policy_and_role "hermes-node-ssh" "hermes" "hermes-node-ssh-access" \
"hermes/developer-ssh" ""
write_policy_and_role "hermes-chat" "hermes" "hermes-chat" \
"hermes/chat-oidc hermes/chat-telegram hermes/agent-tokens" ""
write_policy_and_role "veles" "veles" "veles-backend,veles-generator,veles-postgres,veles-vault-sync" \