outputs.tf

@@ -43,10 +43,10 @@ output "extra_roles" {
 
 output "extra_role_policies" {
   value = {
-    for key, policy in vault_policy.extra_policies :
+    for key, policy in vault_policy.extra :
     key => policy.name
   }
   sensitive   = false
   description = "The tenant extra role policy names"
-  depends_on  = [vault_policy.extra_policies]
+  depends_on  = [vault_policy.extra]
 }

root.tf

@@ -1,7 +1,7 @@
 resource "vault_approle_auth_backend_role" "root" {
   backend        = vault_auth_backend.approle.path
-  role_name      = "${var.name}-admin"
-  token_policies = ["default", vault_policy.tenant_admin.name]
+  role_name      = "${var.name}-root"
+  token_policies = ["default", vault_policy.root.name]
 }
 
 resource "random_uuid" "root_secret_id" {}