Merge pull request 'feat: add policy to read terraform vars' (#40) from benvin/repoflow_terraform into master

Reviewed-on: #40

auth_approle_terraform_repoflow.tf

@@ -4,6 +4,7 @@ resource "vault_approle_auth_backend_role" "terraform_repoflow" {
   token_policies = [
     "default_access",
     "kv/service/repoflow/unkinadmin/tokens/terraform/read",
+    "kv/service/terraform/repoflow",
   ]
   token_ttl     = 60
   token_max_ttl = 120

policies/kv/service/terraform/repoflow.hcl

@@ -0,0 +1,3 @@
+path "kv/data/service/terraform/repoflow" {
+  capabilities = ["read"]
+}