授权本机 SPIFFE 身份访问开发服务

2026-09-16 17:06:27 +00:00
parent 7703b5d21e
commit 64b1acd6c3
5 changed files with 73 additions and 0 deletions
@@ -14,6 +14,11 @@ resource "vault_policy" "ai_agent_ssh" {
  policy = file("${path.module}/policies/ai-agent-ssh.hcl")
 }

+resource "vault_policy" "local_development" {
+  name   = "local-development"
+  policy = file("${path.module}/policies/local-development.hcl")
+}
+
 resource "vault_policy" "spire_poc" {
  name   = "spire-poc"
  policy = file("${path.module}/policies/spire-poc.hcl")