enable per app role list of policies

2025-10-30 10:05:25 +01:00
parent ea9e41ff1a
commit 24c3d92522
5 changed files with 22 additions and 10 deletions
--- a/hashicorp-vault/iac/variables.tf
+++ b/hashicorp-vault/iac/variables.tf
@@ -10,5 +10,8 @@ variable "POSTGRES_CREDENTIALS_EDITOR_PASSWORD" {
  sensitive = true
 }
 variable "applications" {
-  type = set(string)
+  type = set(object({
+    name     = string
+    policies = optional(list(string), [])
+  }))
 }