mirror of
https://github.com/mr0xb/home-iac.git
synced 2026-08-28 11:54:58 -04:00
initial commit
This commit is contained in:
commit
5e3d71294d
10 changed files with 274 additions and 0 deletions
35
terraform/vault-debmini/policies.tf
Normal file
35
terraform/vault-debmini/policies.tf
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
resource "vault_policy" "infra_tools" {
|
||||
name = "infra_tools"
|
||||
policy = <<EOT
|
||||
path "secret/infrastructure/*" {
|
||||
capabilities = ["create", "read", "update", "list", "patch"]
|
||||
}
|
||||
path "secret/infrastructure" {
|
||||
capabilities = ["read", "list"]
|
||||
}
|
||||
EOT
|
||||
}
|
||||
|
||||
resource "vault_policy" "iot" {
|
||||
name = "iot"
|
||||
policy = <<EOT
|
||||
path "secret/iot/*" {
|
||||
capabilities = ["create", "read", "update", "delete", "list", "patch"]
|
||||
}
|
||||
path "secret/iot" {
|
||||
capabilities = ["read", "list"]
|
||||
}
|
||||
EOT
|
||||
}
|
||||
|
||||
resource "vault_policy" "networking" {
|
||||
name = "networking"
|
||||
policy = <<EOT
|
||||
path "secret/networking/*" {
|
||||
capabilities = ["create", "read", "update", "delete", "list", "patch"]
|
||||
}
|
||||
path "secret/networking" {
|
||||
capabilities = ["read", "list"]
|
||||
}
|
||||
EOT
|
||||
}
|
||||
Loading…
Reference in a new issue