terraform-vault-tenant/policies/tenant-admins.policy.hcl
Bertrand Lanson a4e8e14096
All checks were successful
development / Check commit compliance (push) Successful in 5s
pull-requests-open / Check commit compliance (pull_request) Successful in 4s
feat: allow tenant admin to remount secret engines on tenant prefix
2024-05-26 14:04:22 +02:00

16 lines
343 B
HCL

path "${tenant_prefix}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "sys/mounts/${tenant_prefix}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "sys/remount" {
capabilities = ["update"]
allowed_parameters = {
from = "${tenant_prefix}/*"
to = "${tenant_prefix}/*"
}
}