vault-kubernetes-auth-delegation-example.tf

resource "vault_kubernetes_auth_backend_config" "kubernetes_apps_cluster" {
  backend              = vault_auth_backend.kubernetes.path
  kubernetes_host      = "https://${data.terraform_remote_state.clusters.outputs.cluster_endpoint}"
  kubernetes_ca_cert   = chomp(base64decode(data.terraform_remote_state.clusters.outputs.cluster_ca_cert))
  issuer               = "https://container.googleapis.com/v1/${data.terraform_remote_state.clusters.outputs.cluster_id}"
  disable_local_ca_jwt = true
  token_reviewer_jwt   = data.kubernetes_secret.token_reviewer_jwt.data.token
}