diff --git a/.changelog/801.txt b/.changelog/801.txt new file mode 100644 index 000000000..8d8fbba96 --- /dev/null +++ b/.changelog/801.txt @@ -0,0 +1,3 @@ +```release-note:improvement +Documentation: Update hcp_iam_policy docs with HCP Vault Secrets Roles App Manager and App Secret Reader +``` diff --git a/docs/data-sources/iam_policy.md b/docs/data-sources/iam_policy.md index 92a96ca5d..3451d79e9 100644 --- a/docs/data-sources/iam_policy.md +++ b/docs/data-sources/iam_policy.md @@ -10,7 +10,7 @@ description: |- Generates an IAM policy that may be referenced by and applied to other HCP IAM resources, such as the `hcp_project_iam_policy` resource. To see what each role grants, please see [HCP -Documentation](https://developer.hashicorp.com/hcp/docs/hcp/admin/iam/users#organization-role). +Documentation](https://developer.hashicorp.com/hcp/docs/hcp/admin/iam/users#organization). The basic roles can be referenced as follows: * `roles/owner` @@ -18,6 +18,11 @@ The basic roles can be referenced as follows: * `roles/contributor` * `roles/viewer` +HCP Vault Secrets specific roles can be referenced as shown below, please see [Documentation](https://developer.hashicorp.com/hcp/docs/hcp/admin/iam/users#project) for more details. +* `roles/secrets.app-manager` +* `roles/secrets.app-secret-reader` + + ## Example Usage ```terraform @@ -39,7 +44,7 @@ data "hcp_iam_policy" "example" { ] }, { - role = "roles/viewer" + role = "roles/secrets.app-secret-reader" principals = [ "example-sp-3" ] diff --git a/examples/data-sources/hcp_iam_policy/data-source.tf b/examples/data-sources/hcp_iam_policy/data-source.tf index 6053720bc..0d0549b91 100644 --- a/examples/data-sources/hcp_iam_policy/data-source.tf +++ b/examples/data-sources/hcp_iam_policy/data-source.tf @@ -16,7 +16,7 @@ data "hcp_iam_policy" "example" { ] }, { - role = "roles/viewer" + role = "roles/secrets.app-secret-reader" principals = [ "example-sp-3" ] diff --git a/templates/data-sources/iam_policy.md.tmpl b/templates/data-sources/iam_policy.md.tmpl index 4c523ac16..86f69699f 100644 --- a/templates/data-sources/iam_policy.md.tmpl +++ b/templates/data-sources/iam_policy.md.tmpl @@ -10,7 +10,7 @@ description: |- {{ .Description | trimspace }} To see what each role grants, please see [HCP -Documentation](https://developer.hashicorp.com/hcp/docs/hcp/admin/iam/users#organization-role). +Documentation](https://developer.hashicorp.com/hcp/docs/hcp/admin/iam/users#organization). The basic roles can be referenced as follows: * `roles/owner` @@ -18,6 +18,11 @@ The basic roles can be referenced as follows: * `roles/contributor` * `roles/viewer` +HCP Vault Secrets specific roles can be referenced as shown below, please see [Documentation](https://developer.hashicorp.com/hcp/docs/hcp/admin/iam/users#project) for more details. +* `roles/secrets.app-manager` +* `roles/secrets.app-secret-reader` + + ## Example Usage {{ tffile "examples/data-sources/hcp_iam_policy/data-source.tf" }}