terraform-registry/terraform-vault-tenant
terraform-registry/terraform-vault-tenant
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat/stable-release #1

Merged
lanson merged 30 commits from feat/stable-release into main 2024-05-28 20:45:33 +00:00
Conversation 0 Commits 30 Files Changed 15 +8 -1
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 604a02683c - Show all commits

2
admin_approle.tf
View File

@ -22,5 +22,5 @@ resource "vault_identity_entity" "tenant_admin" {
resource "vault_policy" "tenant_admin" {
name = "${var.tenant_name}-admin"
policy = var.tenant_admin_policy_file == null ? file("${path.module}/policies/tenant-admins.policy.hcl") : file(var.tenant_admin_policy_file)
policy = var.tenant_admin_policy_file == null ? templatefile("${path.module}/policies/tenant-admins.policy.hcl", { tenant_name = var.tenant_name }) : templatefile(var.tenant_admin_policy_file, { tenant_name = var.tenant_name })
}

7
policies/tenant-admins.policy.hcl
View File

@ -5,3 +5,10 @@ path "{{identity.entity.metadata.prefix}}/*" {
path "sys/mounts/{{identity.entity.metadata.prefix}}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "auth/token/create" {
capabilities = ["create", "update", "delete"]
allowed_parameters = {
policies = ["${tenant_name}-admin"]
}
}