Quellcode durchsuchen

Adds sensu legacy policy for GC Vault

To be tagged 1.23.8
Brad Poulton vor 4 Jahren
Ursprung
Commit
af744806a4
1 geänderte Dateien mit 20 neuen und 0 gelöschten Zeilen
  1. 20 0
      base/vault-configuration/policies.tf

+ 20 - 0
base/vault-configuration/policies.tf

@@ -140,6 +140,26 @@ resource "vault_policy" "sensu-minion" {
   policy = data.vault_policy_document.sensu-minion.hcl
 }
 
+#Temp for GC Transition. Remove when Legacy Sensu is termianted. 
+data "vault_policy_document" "sensu-minion-legacy" {
+  rule {
+    path         = "salt/*"
+    capabilities = ["list"]
+    description  = "sensu-minion-legacy"
+  }
+  rule {
+    path         = "salt/minions/sensu.msoc.defpoint.local"
+    capabilities = ["read"]
+    description  = "sensu-minion-legacy"
+
+  }
+}
+
+resource "vault_policy" "sensu-minion-legacy" {
+  name   = "saltstack/minion/sensu.msoc.defpoint.local"
+  policy = data.vault_policy_document.sensu-minion-legacy.hcl
+}
+
 
 data "vault_policy_document" "soc" {
   rule {