这是indexloc提供的服务,不要输入任何密码
Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 13 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,11 +32,18 @@ module "entities" {
}
]

aliases = {
"alias-1" = "user-1"
"alias-2" = "user-2"
"alias-3" = "user-3"
}
aliases = [
{
"name" = "jwt-user-1"
"entity" = "user-1"
"auth_path" = "jwt"
},
{
"name" = "oidc-user2"
"entity" = "user-2"
"auth_path" = "oidc"
}
]
}

module "vault_groups" {
Expand Down Expand Up @@ -75,6 +82,7 @@ module "vault_groups" {
| Name | Description | Type | Default |
|------|-------------|------|---------|
| create_vault_entity_aliases | n/a | `bool` | `false` |
| vault_aliases_objects | List of objects defining the alias to entity and auth path match | <pre>list(object({<br> name = string<br> entity = string<br> auth_path = string<br> }))</pre> | `[]` |
| vault_endpoint | Vault endpoint | `string` | `"http://127.0.0.1:8200"` |
| vault_entity_objects | List object for the Vault identity entity | <pre>list(object({<br> name = string<br> policies = list(string)<br> metadata = map(string)<br> }))</pre> | `[]` |
| vault_group_objects | List object for Vault identity group | <pre>list(object({<br> name = string<br> type = string<br> policies = list(string)<br> member_group_ids = list(string)<br> member_entity_ids = list(string)<br> metadata = map(string)<br> }))</pre> | `[]` |
Expand Down
1 change: 1 addition & 0 deletions main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ module "vault_entities" {

create_entity_aliases = var.create_vault_entity_aliases
entities = var.vault_entity_objects
aliases = var.vault_aliases_objects
}

module "vault_groups" {
Expand Down
19 changes: 13 additions & 6 deletions modules/vault-identity-entities/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,11 +32,18 @@ module "entities" {
}
]

aliases = {
"alias-1" = "user-1"
"alias-2" = "user-2"
"alias-3" = "user-3"
}
aliases = [
{
"name" = "jwt-user-1"
"entity" = "user-1"
"auth_path" = "jwt"
},
{
"name" = "oidc-user2"
"entity" = "user-2"
"auth_path" = "oidc"
}
]
}
```

Expand All @@ -56,7 +63,7 @@ module "entities" {

| Name | Description | Type | Default |
|------|-------------|------|---------|
| aliases | Map of aliases linked to entities | `map` | `{}` |
| aliases | List of objects defining the alias to entity and auth path match | <pre>list(object({<br> name = string<br> entity = string<br> auth_path = string<br> }))</pre> | `[]` |
| create_entity_aliases | Enable the creation of entity aliase | `bool` | `false` |
| entities | List object for the Vault identity entity | <pre>list(object({<br> name = string<br> policies = list(string)<br> metadata = map(string)<br> }))</pre> | `[]` |

Expand Down
3 changes: 2 additions & 1 deletion modules/vault-identity-entities/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,8 @@ variable "entities" {
}

variable "create_entity_aliases" {
default = false
description = "Enable Vault entity alias creation"
default = false
}

variable "aliases" {
Expand Down
13 changes: 12 additions & 1 deletion variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,8 @@ variable "vault_endpoint" {
}

variable "create_vault_entity_aliases" {
default = false
description = "Enable Vault entity alias creation"
default = false
}

variable "vault_entity_objects" {
Expand All @@ -17,6 +18,16 @@ variable "vault_entity_objects" {
default = []
}

variable "vault_aliases_objects" {
description = "List of objects defining the alias to entity and auth path match"
type = list(object({
name = string
entity = string
auth_path = string
}))
default = []
}

variable "vault_group_objects" {
description = "List object for Vault identity group"
type = list(object({
Expand Down