20 lines
648 B
Terraform
20 lines
648 B
Terraform
|
resource "vault_ldap_auth_backend" "ldap" {
|
||
|
|
path = "ldap"
|
||
|
|
url = "ldap://ldap.ducamps.win"
|
||
|
|
userdn = "dc=ducamps,dc=win"
|
||
|
|
userattr = "uid"
|
||
|
|
discoverdn = false
|
||
|
|
groupdn = "cn=groups,dc=ducamps,dc=win"
|
||
|
|
groupfilter = "(|(memberUid={{.Username}})(member={{.UserDN}})(uniqueMember={{.UserDN}}))"
|
||
|
|
binddn = "uid=vaultserviceaccount,cn=users,dc=ducamps,dc=win"
|
||
|
|
groupattr = "cn"
|
||
|
|
bindpass = var.ldap_bindpass
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
resource "vault_ldap_auth_backend_group" "vault_admin" {
|
||
|
|
groupname = "vault_admin"
|
||
|
|
policies = ["admin_policy"]
|
||
|
|
backend = vault_ldap_auth_backend.ldap.path
|
||
|
|
}
|