resource "vault_approle_auth_backend_role" "incus_cluster" {
  role_name      = "incus_cluster"
  bind_secret_id = false
  token_policies = [
    "default_access",
    "kv/service/incus/incus-cluster-join-tokens"
  ]
  token_ttl     = 60
  token_max_ttl = 120
  token_bound_cidrs = [
    "10.10.12.200/32",
    "198.18.13.77/32",
    "198.18.13.78/32",
    "198.18.13.79/32"
  ]
}