add kubernetes secret engine and approle auth to openbao

2026-04-04 01:09:58 +02:00
parent 9d5dd332fc
commit f2d60e0b15
16 changed files with 89 additions and 2 deletions
--- a/vault/kubernetes-auth-roles/authentik.yaml
+++ b/vault/kubernetes-auth-roles/authentik.yaml
--- a/vault/kubernetes-auth-roles/backup.yaml
+++ b/vault/kubernetes-auth-roles/backup.yaml
--- a/vault/kubernetes-auth-roles/cert-manager.yaml
+++ b/vault/kubernetes-auth-roles/cert-manager.yaml
--- a/vault/kubernetes-auth-roles/crawl4ai.yaml
+++ b/vault/kubernetes-auth-roles/crawl4ai.yaml
--- a/vault/kubernetes-auth-roles/frigate-camera.yaml
+++ b/vault/kubernetes-auth-roles/frigate-camera.yaml
--- a/vault/kubernetes-auth-roles/immich.yaml
+++ b/vault/kubernetes-auth-roles/immich.yaml
--- a/vault/kubernetes-auth-roles/llama-proxy.yaml
+++ b/vault/kubernetes-auth-roles/llama-proxy.yaml
--- a/vault/kubernetes-auth-roles/ollama-proxy.yaml
+++ b/vault/kubernetes-auth-roles/ollama-proxy.yaml
--- a/vault/kubernetes-auth-roles/openwebui.yaml
+++ b/vault/kubernetes-auth-roles/openwebui.yaml
--- a/vault/kubernetes-auth-roles/renovate.yaml
+++ b/vault/kubernetes-auth-roles/renovate.yaml
--- a/vault/kubernetes-auth-roles/woodpecker.yaml
+++ b/vault/kubernetes-auth-roles/woodpecker.yaml
--- a/vault/kubernetes-se-roles/flux-reconcile.yaml
+++ b/vault/kubernetes-se-roles/flux-reconcile.yaml
@@ -0,0 +1,6 @@
+allowed_kubernetes_namespaces: flux-system
+generated_role_rules:
+  rules:
+    - apiGroups: ["kustomize.toolkit.fluxcd.io"]
+      resources: ["gitrepositories"]
+      verbs: ["update", "watch"]
--- a/vault/kubernetes-secretengine-config.yaml
+++ b/vault/kubernetes-secretengine-config.yaml