policies/tenant-admins.policy.hcl

@@ -9,6 +9,9 @@ path "sys/mounts/${tenant_prefix}/*" {
 path "auth/token/create" {
   capabilities = ["create", "update", "delete"]
   allowed_parameters = {
-    "policies" = [${admin_policies}, ${reverse(admin_policies)}]
+    "policies" = [
+      [${for policy in admin_policies}${policy},${endfor}],
+      [${for policy in reverse(admin_policies)}${policy},${endfor}]
+    ]
   }
 }