Files
homelab-infra/infrastructure/openbao/terraform/policies/sandbox-external-secrets.hcl
T
panxiao81 e0e629794b
yaml / yaml (pull_request) Successful in 17s
terraform / validate (pull_request) Successful in 49s
为 sandbox 接入 OpenBao External Secrets
2026-09-18 17:34:53 +00:00

10 lines
293 B
HCL

# Read only the shared OpenSandbox control-plane API key. The same Bao object is
# consumed by the server in sandbox and, later, by the scheduler in homelab.
path "kv/data/k8s/opensandbox-api" {
capabilities = ["read"]
}
path "kv/metadata/k8s/opensandbox-api" {
capabilities = ["read"]
}