terraform-vault-tenant/policies/tenant-admins.policy.hcl
Bertrand Lanson 604a02683c
All checks were successful
development / Check commit compliance (push) Successful in 5s
pull-requests-open / Check commit compliance (pull_request) Successful in 6s
feat: allow tenant admin to create child token with its own permissions
2024-05-25 16:27:53 +02:00

15 lines
385 B
HCL

path "{{identity.entity.metadata.prefix}}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "sys/mounts/{{identity.entity.metadata.prefix}}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "auth/token/create" {
capabilities = ["create", "update", "delete"]
allowed_parameters = {
policies = ["${tenant_name}-admin"]
}
}