cyberark/secrets-provider-for-k8s

#!/bin/bash

set -euo pipefail
cat << EOL
---
- !policy
  id: test-app
  owner: !group devops
  annotations:
    description: This policy connects authn identities to an application identity. It defines a layer named for an application that contains the whitelisted identities that can authenticate to the authn-k8s endpoint. Any permissions granted to the application layer will be inherited by the whitelisted authn identities, thereby granting access to the authenticated identity.
  body:
    - !layer

    # add authn identities to application layer so authn roles inherit app's permissions
    - !grant
      role: !layer
      members:
        - !layer /conjur/authn-k8s/${AUTHENTICATOR_ID}/apps
EOL