Token Auth Method terraform

[Donislav Belev]

Hello Guys

I have configured vault policies with terraform like this

resource "vault_policy" "dev" {
 name = "dev"

 policy = <<EOT
path "secret/dev" {
  capabilities = ["create", "read", "update", "delete", "list"]
}
path "auth/token/create" {
 capabilities = ["update"]
}
EOT
}

Now I need to configure roles. With API this looks like that:

vault write /auth/token/roles/dev allowed_policies="dev" period="876h"

I am missing the recource name and syntax for doing this with terraform. 

Regards

[Carlos Vitor Barros]

Terraform Vault provider doesn't have support to configure the mappings for several auth methods.

You need to configure this via the CLI or API calls.

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/hashicorp/vault/issues
IRC: #vault-tool on Freenode
---
You received this message because you are subscribed to the Google Groups "Vault" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vault-tool+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/vault-tool/310f98c4-6f86-4aad-ac81-727b526ece71%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Donislav Belev]

Thank you Carlos.

In that case do u know any way I can issue a token with validity and period like few years long.

Normally I would do 

vault token-create -role dev

and I would have role dev with policy dev and period defined as  87600h for example

May I issue such token without using role?

 

[Carlos Vitor Barros]

Hi Donislav,

Using the CLI you can use:

https://www.vaultproject.io/docs/commands/token/create.html#examples

This allows you to create token that have the given policies attached.

Regards,

--

This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/hashicorp/vault/issues
IRC: #vault-tool on Freenode
---
You received this message because you are subscribed to the Google Groups "Vault" group.

To unsubscribe from this group and stop receiving emails from it, send an email to vault-tool+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/vault-tool/f4fa41f0-9e34-45a7-a6ab-ae2b9750e4e6%40googlegroups.com.