add kubernetes secret engine and approle auth to openbao

2026-04-04 01:09:58 +02:00
parent 9d5dd332fc
commit f2d60e0b15
16 changed files with 89 additions and 2 deletions
--- a/vault/kubernetes-auth-roles/authentik.yaml
+++ b/vault/kubernetes-auth-roles/authentik.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - authentik-secret
+bound_service_account_namespaces:
+  - authentik
+token_policies:
+  - authentik
--- a/vault/kubernetes-auth-roles/backup.yaml
+++ b/vault/kubernetes-auth-roles/backup.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - backup
+bound_service_account_namespaces:
+  - gitea
+token_policies:
+  - backup
--- a/vault/kubernetes-auth-roles/cert-manager.yaml
+++ b/vault/kubernetes-auth-roles/cert-manager.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - ovh-credentials
+bound_service_account_namespaces:
+  - cert-manager
+token_policies:
+  - ovh-credentials
--- a/vault/kubernetes-auth-roles/crawl4ai.yaml
+++ b/vault/kubernetes-auth-roles/crawl4ai.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - crawl4ai-secret
+bound_service_account_namespaces:
+  - crawl4ai
+token_policies:
+  - crawl4ai
--- a/vault/kubernetes-auth-roles/frigate-camera.yaml
+++ b/vault/kubernetes-auth-roles/frigate-camera.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - camera
+bound_service_account_namespaces:
+  - frigate
+token_policies:
+  - frigate
--- a/vault/kubernetes-auth-roles/immich.yaml
+++ b/vault/kubernetes-auth-roles/immich.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - immich-password
+bound_service_account_namespaces:
+  - immich
+token_policies:
+  - immich
--- a/vault/kubernetes-auth-roles/llama-proxy.yaml
+++ b/vault/kubernetes-auth-roles/llama-proxy.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - llama-proxy
+bound_service_account_namespaces:
+  - llama
+token_policies:
+  - ollama
--- a/vault/kubernetes-auth-roles/ollama-proxy.yaml
+++ b/vault/kubernetes-auth-roles/ollama-proxy.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - ollama-proxy
+bound_service_account_namespaces:
+  - ollama
+token_policies:
+  - ollama
--- a/vault/kubernetes-auth-roles/openwebui.yaml
+++ b/vault/kubernetes-auth-roles/openwebui.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - openwebui-secret
+bound_service_account_namespaces:
+  - openwebui
+token_policies:
+  - openwebui
--- a/vault/kubernetes-auth-roles/renovate.yaml
+++ b/vault/kubernetes-auth-roles/renovate.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - renovate
+bound_service_account_namespaces:
+  - renovate
+token_policies:
+  - renovate
--- a/vault/kubernetes-auth-roles/woodpecker.yaml
+++ b/vault/kubernetes-auth-roles/woodpecker.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - woodpecker-secret
+bound_service_account_namespaces:
+  - woodpecker
+token_policies:
+  - woodpecker