lucymhdavies

Terraform plan to create this example looks like:

  # vault_pki_secret_backend_role.pki_roles["pki/inter/davnet.lmhd.me.yaml"] will be created
  + resource "vault_pki_secret_backend_role" "pki_roles" {
      + allow_any_name                     = false
      + allow_bare_domains                 = false
      + allow_glob_domains                 = false
      + allow_ip_sans                      = true
      + allow_localhost                    = false

lucymhdavies

$ vault read sys/policies/egp/restrict-userpass-cidr
Key                  Value
---                  -----
enforcement_level    hard-mandatory
name                 restrict-userpass-cidr
paths                [auth/userpass/*]
policy               ...