unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

neoloc/terraformvault #1

Merged
unkinben merged 4 commits from neoloc/terraformvault into master 2024-09-26 23:06:26 +10:00
Conversation 0 Commits 4 Files Changed 45 +12 -5
1 changed files with 12 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 582f38c68f - Show all commits

17
auth_backend_ldap.tf
View File

@ -11,12 +11,19 @@ data "vault_generic_secret" "ldap_bindpass" {
resource "vault_ldap_auth_backend" "ldap" {
path = "ldap"
url = "ldap://ldap.service.consul"
userdn = "dc=main,dc=unkin,dc=net"
userdn = "ou=people,ou=users,dc=main,dc=unkin,dc=net"
userattr = "uid"
upndomain = "main.unkin.net"
upndomain = "users.main.unkin.net"
discoverdn = false
groupdn = "ou=groups,dc=main,dc=unkin,dc=net"
groupfilter = "(memberOf=ou=vault_access,ou=groups,dc=main,dc=unkin,dc=net)"
binddn = "svc_vault"
groupdn = "ou=users,dc=main,dc=unkin,dc=net"
groupfilter = "(&(objectClass=posixGroup)(memberUid={{.Username}}))"
groupattr = "uid"
binddn = data.vault_generic_secret.ldap_bindpass.data["distinguishedName"]
bindpass = data.vault_generic_secret.ldap_bindpass.data["pass"]
}
resource "vault_ldap_auth_backend_group" "vault_access" {
groupname = "vault_access"
policies = ["sshca_signuser"]
backend = vault_ldap_auth_backend.ldap.path
}