- add approle for terraform, tf_vault - add policices to manage terraform access to vault - add policices for default access to vault from ldap users
10 lines
267 B
HCL
10 lines
267 B
HCL
# Allow management of policies (create, update, delete, list, and read)
|
|
path "sys/policies/acl/*" {
|
|
capabilities = ["create", "update", "delete", "read", "list"]
|
|
}
|
|
|
|
# Allow listing of available policies
|
|
path "sys/policies/acl" {
|
|
capabilities = ["read", "list"]
|
|
}
|