diff --git a/.cz.toml b/.cz.toml index 52d405f..a05167a 100644 --- a/.cz.toml +++ b/.cz.toml @@ -1,6 +1,5 @@ [tool.commitizen] name = "cz_conventional_commits" version_provider = "scm" -# version_files = ["galaxy.yml:^version"] update_changelog_on_bump = true major_version_zero = true diff --git a/admin_approle.tf b/admin_approle.tf index 1d6a56c..bdcd121 100644 --- a/admin_approle.tf +++ b/admin_approle.tf @@ -26,5 +26,5 @@ resource "vault_identity_entity" "tenant_admin" { resource "vault_policy" "tenant_admin" { name = "${var.tenant_name}-admin" - policy = var.tenant_admin_policy_file == null ? templatefile("${path.module}/policies/tenant-admins.policy.hcl", { tenant_prefix = var.tenant_prefix, admin_policies = local.tenant_admin_policies }) : file(var.tenant_admin_policy_file) + policy = var.tenant_admin_policy_file == null ? templatefile("${path.module}/policies/tenant-admins.policy.hcl", { tenant_prefix = var.tenant_prefix }) : file(var.tenant_admin_policy_file) } diff --git a/policies/tenant-admins.policy.hcl b/policies/tenant-admins.policy.hcl index 4bb671e..d318d9f 100644 --- a/policies/tenant-admins.policy.hcl +++ b/policies/tenant-admins.policy.hcl @@ -5,13 +5,3 @@ path "${tenant_prefix}/*" { path "sys/mounts/${tenant_prefix}/*" { capabilities = ["create", "update", "read", "delete", "list"] } - -path "auth/token/create" { - capabilities = ["create", "update", "delete"] - allowed_parameters = { - "policies" = [ - [${for policy in admin_policies}${policy},${endfor}], - [${for policy in reverse(admin_policies)}${policy},${endfor}] - ] - } -}