feat: add vault admin group

- assign global-admin policy
2024-10-21 19:42:49 +11:00 · 2024-10-21 19:42:49 +11:00 · bcdb81e060
commit bcdb81e060
parent 9e3cbce264
1 changed files with 9 additions and 0 deletions
--- a/auth_backend_ldap.tf
+++ b/auth_backend_ldap.tf
@ -29,3 +29,12 @@ resource "vault_ldap_auth_backend_group" "vault_access" {
  ]
  backend = vault_ldap_auth_backend.ldap.path
 }
+
+resource "vault_ldap_auth_backend_group" "vault_admin" {
+  groupname = "vault_access"
+  policies = [
+    "default_access",
+    "global-admin",
+  ]
+  backend = vault_ldap_auth_backend.ldap.path
+}