enable per app role list of policies

2025-10-30 10:05:25 +01:00
parent ea9e41ff1a
commit 24c3d92522
5 changed files with 22 additions and 10 deletions
--- a/hashicorp-vault/iac/main.tf
+++ b/hashicorp-vault/iac/main.tf
@@ -76,7 +76,8 @@ resource "vault_kubernetes_auth_backend_role" "vso" {

 module "app_policies" {
  source       = "./modules/app_policy"
-  for_each     = var.applications
-  name         = each.value
+  for_each     = { for app in var.applications : app.name => app }
+  name         = each.value.name
+  policies     = each.value.policies
  gitea_app_id = var.gitea_app_id
-}
+}