Merge pull request 'chore: add default_user_password credentials policy' (#55) from benvin/openldap_default_pass into master

Reviewed-on: #55
2026-02-15 13:45:45 +11:00 · 2026-02-15 13:45:45 +11:00 · 4cad39989f
commit 4cad39989f
parent 51bc3fffc0 c825962490
2 changed files with 11 additions and 1 deletions
--- a/policies/kv/service/openldap/default_user_password/read.yaml
+++ b/policies/kv/service/openldap/default_user_password/read.yaml
@ -0,0 +1,10 @@
+# Allow reading openldap default-user credentials
+---
+rules:
+  - path: "kv/data/service/openldap/default_user_password"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - terraform_ldap
--- a/policies/kv/service/openldap/ldap_admin_password/read.yaml
+++ b/policies/kv/service/openldap/ldap_admin_password/read.yaml
@ -1,4 +1,4 @@
-# Allow reading Radarr configuration
+# Allow reading openldap admin credentials
 ---
 rules:
  - path: "kv/data/service/openldap/ldap_admin_password"