terraform-vault-tenant/policies/tenant-admins.policy.hcl
Bertrand Lanson 9a30e25a80
All checks were successful
development / Check commit compliance (push) Successful in 5s
pull-requests-open / Check commit compliance (pull_request) Successful in 5s
fix: wrong permissions on token/create for tenant admin
2024-05-25 16:59:55 +02:00

15 lines
385 B
HCL

path "{{identity.entity.metadata.prefix}}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "sys/mounts/{{identity.entity.metadata.prefix}}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "auth/token/create" {
capabilities = ["create", "update", "sudo"]
allowed_parameters = {
policies = [["${tenant_name}-admin"]]
}
}