terraform-vault-tenant/policies/tenant-admins.policy.hcl
Bertrand Lanson 39371c8503
All checks were successful
development / Check commit compliance (push) Successful in 5s
pull-requests-open / Check commit compliance (pull_request) Successful in 5s
feat: only allow tenant admin to create tokens with its own policies
2024-05-25 18:24:24 +02:00

15 lines
372 B
HCL

path "${tenant_prefix}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "sys/mounts/${tenant_prefix}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "auth/token/create" {
capabilities = ["create", "update", "delete"]
allowed_parameters = {
"policies" = [${admin_policies}, ${reverse(admin_policies)}]
}
}