适配 Bao 续期命令并纳入已验证的监控身份

2026-09-25 20:33:16 +00:00
parent 005d8341ed
commit d65da84d2a
2 changed files with 12 additions and 1 deletions
@@ -68,3 +68,14 @@ import {
  to = vault_pki_secret_backend_config_urls.this
  id = "pki/config/urls"
 }
+
+# 本次维护预检先通过同名 API 配置验证，后续 Terraform 纳入既有主 state。
+import {
+  to = vault_policy.metrics
+  id = "metrics"
+}
+
+import {
+  to = vault_kubernetes_auth_backend_role.metrics
+  id = "auth/kubernetes/role/metrics"
+}