add authentik vault policies

2026-03-14 20:12:01 +01:00
parent 829a5a3fd8
commit 7948f53d1d
2 changed files with 9 additions and 0 deletions
--- a/vault/kubernetes-roles/authentik.yaml
+++ b/vault/kubernetes-roles/authentik.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - authentik-secret
+bound_service_account_namespaces:
+  - authentik
+token_policies:
+  - authentik
--- a/vault/policy/authentik.hcl
+++ b/vault/policy/authentik.hcl
@@ -0,0 +1,3 @@
+path "secret/data/authentik" {
+    capabilities = ["read"]
+}