From 3e8cd32e1f426b0a3368dd9710e5422a49187cae Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 19 Sep 2026 15:44:42 +1000 Subject: [PATCH] Drop the sshca sign policy moved block --- modules/vault_cluster/state_migrations.tf | 6 ------ 1 file changed, 6 deletions(-) diff --git a/modules/vault_cluster/state_migrations.tf b/modules/vault_cluster/state_migrations.tf index 03a852a..e9a2020 100644 --- a/modules/vault_cluster/state_migrations.tf +++ b/modules/vault_cluster/state_migrations.tf @@ -338,12 +338,6 @@ moved { to = module.vault_policy["sshca/sign/host"].vault_policy.this } -# The SSH host signing policy is named after the sshca role it grants (signhost) -moved { - from = module.vault_policy["sshca/sign/host"].vault_policy.this - to = module.vault_policy["sshca/sign/signhost"].vault_policy.this -} - moved { from = vault_policy.policies["sys/sys_audit_read"] to = module.vault_policy["sys/audit/read"].vault_policy.this