Vault Terraform Example

foobar.tf

resource "vault_auth_backend" "github" {
  type = "github"
}

resource "vault_generic_secret" "github_org" {
  path = "auth/github/config"

  depends_on = ["vault_auth_backend.github"]

  data_json = <<EOT
  {
    "organization" : "FundingCircle"
  }
  EOT
}

resource "vault_policy" "app_secrets_read" {
  name = "app_read"

  policy = <<EOT
  path "secret/my_app" {
    policy = "read"
  }
  EOT
}

resource "vault_generic_secret" "github_infra_team" {
  path = "auth/github/map/teams/infrastructure"

  depends_on = ["vault_generic_secret.github_org"]

  data_json = <<EOT
  {
  "value": "app_read"
  }
  EOT
}