move renovate gitea token to vault

2025-05-17 22:51:15 +02:00
parent c2e2e91931
commit 8251d8088a
5 changed files with 49 additions and 1 deletions
--- a/vault/kubernetes-roles/renovate.yaml
+++ b/vault/kubernetes-roles/renovate.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - renovate
+bound_service_account_namespaces:
+  - renovate
+token_policies:
+  - renovate
--- a/vault/policy/renovate.hcl
+++ b/vault/policy/renovate.hcl
@@ -0,0 +1,3 @@
+path "secret/data/renovate" {
+    capabilities = ["read"]
+}