infra/tf/bao-policies.tf

resource "vault_policy" "k8s_default" {
  name = "k8s-default-sa"

  policy = templatefile("bao-policies/k8s-default.hcl", { k8s_auth_backend = vault_auth_backend.kubernetes.accessor })
}