vault

Statefully manage Vault policies.

Important

This module requires the general Vault setup.

saltext.vault.states.vault.policy_present(name, rules)

Ensure a Vault policy with the given name and rules is present.

name

The name of the policy

rules

Rules formatted as in-line HCL

demo-policy:
  vault.policy_present:
    - name: foo/bar
    - rules: |
        path "secret/top-secret/*" {
          policy = "deny"
        }
        path "secret/not-very-secret/*" {
          policy = "write"
        }

saltext.vault.states.vault.policy_absent(name)

Ensure a Vault policy with the given name and rules is absent.

name

The name of the policy