fix: adjust code for root policy document to generate blocks instead of map of lists
This commit is contained in:
parent
d28fe5c099
commit
7b337f47f5
52
root.tf
52
root.tf
@ -24,18 +24,56 @@ locals {
|
|||||||
root_policy_rules = merge(local.root_policy_default_rules, var.root_policy_extra_rules)
|
root_policy_rules = merge(local.root_policy_default_rules, var.root_policy_extra_rules)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# data "vault_policy_document" "root" {
|
||||||
|
# dynamic "rule" {
|
||||||
|
# for_each = local.root_policy_rules
|
||||||
|
# content {
|
||||||
|
# path = each.value.path
|
||||||
|
# capabilities = each.value.capabilities
|
||||||
|
# description = try(each.value.description, null)
|
||||||
|
# required_parameters = try(each.value.required_parameters, null)
|
||||||
|
# allowed_parameter = try(each.value.allowed_parameter, null)
|
||||||
|
# denied_parameter = try(each.value.denied_parameter, null)
|
||||||
|
# min_wrapping_ttl = try(each.value.min_wrapping_ttl, null)
|
||||||
|
# max_wrapping_ttl = try(each.value.max_wrapping_ttl, null)
|
||||||
|
# }
|
||||||
|
# }
|
||||||
|
# }
|
||||||
|
|
||||||
data "vault_policy_document" "root" {
|
data "vault_policy_document" "root" {
|
||||||
dynamic "rule" {
|
dynamic "rule" {
|
||||||
for_each = local.root_policy_rules
|
for_each = local.root_policy_rules
|
||||||
content {
|
content {
|
||||||
path = each.value.path
|
path = rule.value.path
|
||||||
capabilities = each.value.capabilities
|
capabilities = rule.value.capabilities
|
||||||
description = try(each.value.description, null)
|
description = try(rule.value.description, null)
|
||||||
|
min_wrapping_ttl = try(rule.value.min_wrapping_ttl, null)
|
||||||
|
max_wrapping_ttl = try(rule.value.max_wrapping_ttl, null)
|
||||||
required_parameters = try(each.value.required_parameters, null)
|
required_parameters = try(each.value.required_parameters, null)
|
||||||
allowed_parameter = try(each.value.allowed_parameter, null)
|
|
||||||
denied_parameter = try(each.value.denied_parameter, null)
|
# dynamic "required_parameters" {
|
||||||
min_wrapping_ttl = try(each.value.min_wrapping_ttl, null)
|
# for_each = rule.value.required_parameters != null ? rule.value.required_parameters : {}
|
||||||
max_wrapping_ttl = try(each.value.max_wrapping_ttl, null)
|
# content {
|
||||||
|
# key = required_parameters.key
|
||||||
|
# value = required_parameters.value
|
||||||
|
# }
|
||||||
|
# }
|
||||||
|
|
||||||
|
dynamic "allowed_parameter" {
|
||||||
|
for_each = rule.value.allowed_parameter != null ? rule.value.allowed_parameter : {}
|
||||||
|
content {
|
||||||
|
key = allowed_parameter.key
|
||||||
|
value = allowed_parameter.value
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
dynamic "denied_parameter" {
|
||||||
|
for_each = rule.value.denied_parameter != null ? rule.value.denied_parameter : {}
|
||||||
|
content {
|
||||||
|
key = denied_parameter.key
|
||||||
|
value = denied_parameter.value
|
||||||
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user