terraform-registry/terraform-vault-tenant
terraform-registry/terraform-vault-tenant
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: increase permissions for remounting secret engines
All checks were successful
development / Check commit compliance (push) Successful in 5s
Details
pull-requests-open / Check commit compliance (pull_request) Successful in 4s
Details

Browse Source
This commit is contained in:
Bertrand Lanson 2024-05-26 15:20:18 +02:00
parent e1128cf244
commit 154a3ba98a
Signed by: lanson
SSH Key Fingerprint: SHA256:/nqc6HGqld/PS208F6FUOvZlUzTS0rGpNNwR5O2bQBw
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
policies/tenant-admins.policy.hcl
View File

@ -9,7 +9,11 @@ path "sys/mounts/${tenant_prefix}/*" {
path "sys/remount" { path "sys/remount" {
capabilities = ["update"] capabilities = ["update"]
allowed_parameters = { allowed_parameters = {
from = ["${tenant_prefix}/*"] "from" = ["${tenant_prefix}/*"]
to = ["${tenant_prefix}/*"] "to" = ["${tenant_prefix}/*"]
} }
} }
path "sys/remount/status/*" {
capabilities = ["read"]
}