auth_approle_puppetapi.tf

@@ -1,14 +0,0 @@
-resource "vault_approle_auth_backend_role" "puppetapi" {
-  role_name      = "puppetapi"
-  bind_secret_id = false
-  token_policies = ["puppetapi_read_tokens"]
-  token_ttl      = 30
-  token_max_ttl  = 30
-  token_bound_cidrs = [
-    "198.18.17.3/32",
-    "198.18.13.32/32",
-    "198.18.13.33/32",
-    "198.18.13.34/32",
-    "198.18.13.46/32"
-  ]
-}

policies.tf

@@ -11,8 +11,7 @@ locals {
     "policies/rundeck",
     "policies/ssh-host-signer",
     "policies/sshca",
-    "policies/kv/service/glauth/services",
-    "policies/kv/service/puppetapi",
+    "policies/kv/service/glauth/services"
   ]
 }
 

policies/kv/service/puppetapi/puppetapi_read_tokens.hcl

@@ -1,3 +0,0 @@
-path "kv/data/service/puppetapi/tokens" {
-    capabilities = ["read"]
-}