salt.states.vault module¶

States for managing Hashicorp Vault. Currently handles policies. Configuration instructions are documented in the execution module docs.

salt.states.vault.policy_present(name, rules)¶

Ensure a Vault policy with the given name and rules is present.

name

The name of the policy

rules

Rules formatted as in-line HCL

demo-policy:
  vault.policy_present:
    - name: foo/bar
    - rules: |
        path "secret/top-secret/*" {
          policy = "deny"
        }
        path "secret/not-very-secret/*" {
          policy = "write"
        }