terraform-vault-tenant/policies/tenant-admins.policy.hcl

20 lines
418 B
HCL
Raw Normal View History

path "${tenant_prefix}/*" {
2024-05-25 10:59:54 +00:00
capabilities = ["create", "update", "read", "delete", "list"]
}
path "sys/mounts/${tenant_prefix}/*" {
2024-05-25 10:59:54 +00:00
capabilities = ["create", "update", "read", "delete", "list"]
}
path "sys/remount" {
2024-05-26 13:35:53 +00:00
capabilities = ["update", "sudo"]
allowed_parameters = {
"from" = ["${tenant_prefix}/*"]
"to" = ["${tenant_prefix}/*"]
}
}
path "sys/remount/status/*" {
capabilities = ["read"]
}