fixup! vault: implement bootstrap integration

2026-02-02 22:59:46 +01:00
parent 1f4b7a6cbc
commit 1ae0e67e80
7 changed files with 150 additions and 2 deletions
--- a/terraform/vault/hosts-generated.tf
+++ b/terraform/vault/hosts-generated.tf
@@ -5,6 +5,12 @@
 # Each host gets access to its own secrets under hosts/<hostname>/*
 locals {
  generated_host_policies = {
+    "vaulttest01" = {
+      paths = [
+        "secret/data/hosts/vaulttest01/*",
+      ]
+    }
+  
  }

  # Placeholder secrets - user should add actual secrets manually or via tofu