vault kvv1/ovh/<app> permission

2025-11-04 10:11:05 +01:00
parent 24c3d92522
commit 98395dbe5d
1 changed files with 3 additions and 2 deletions
--- a/hashicorp-vault/iac/modules/app_policy/main.tf
+++ b/hashicorp-vault/iac/modules/app_policy/main.tf
@@ -27,13 +27,14 @@ data "vault_policy_document" "ops" {
    path         = "kvv1/google/credentials"
    capabilities = ["read"]
  }
-  # read cloudflare credentials for terraform cloudflare backend
+  # read cloudflare related secrets
  rule {
    path         = "kvv1/cloudflare/${local.name}*"
    capabilities = ["read", "list", "create", "update", "delete"]
  }
+  # read ovh related secrets
  rule {
-    path         = "kvv1/cloudflare/${local.name}*"
+    path         = "kvv1/ovh/${local.name}*"
    capabilities = ["read", "list", "create", "update", "delete"]
  }
  # read tofu_module_reader gitea bot user ssh keys