infra/tf/bao-policies/k8s-default.hcl

path "${k8s_secrets_path}/data/{{identity.entity.aliases.${k8s_auth_backend_accessor}.metadata.service_account_namespace}}/{{identity.entity.aliases.${k8s_auth_backend_accessor}.metadata.service_account_name}}/*" {
    capabilities = ["read"]
}
vault mounts: drop test, create a more prod kv store 2024-09-10 19:11:33 +00:00			`path "${k8s_secrets_path}/data/{{identity.entity.aliases.${k8s_auth_backend_accessor}.metadata.service_account_namespace}}/{{identity.entity.aliases.${k8s_auth_backend_accessor}.metadata.service_account_name}}/*" {`
bao policies: to use tf template 2024-09-10 17:36:12 +00:00			`capabilities = ["read"]`
			`}`