create new vault snapshot policy

2023-08-26 17:31:08 +02:00 · 2023-08-26 17:31:08 +02:00 · ddf50d4837
commit ddf50d4837
parent efa707dea0
1 changed files with 10 additions and 1 deletions
--- a/vault/policy.tf
+++ b/vault/policy.tf
@ -1,4 +1,13 @@
-
+data "vault_policy_document" "snapshot" {
+    rule {
+        path= "sys/storage/raft/snapshot"
+        capabilities = ["read"]
+    }
+}
+resource "vault_policy" "snapshot" {
+  name = "snapshot"
+  policy = data.vault_policy_document.snapshot.hcl
+}
 data "vault_policy_document" "nomad_server_policy" {
  rule {
    path = "auth/token/create/nomad-cluster"