micahlee · December 10, 2018 21:55
diff --git a/example-org.yml b/example-org.yml
 # example-org.yml
 - !policy 
   id: example-org
   body: 
   - !layer
      annotations:
        org-id: 83a5b409-f5e0-4db7-8036-e342cafe358c
diff --git a/example-space.yml b/example-space.yml
 # example-space.yml
 - !policy 
  id: example-space
  body:
  - !layer
    annotations:
      space-id: 2b2e0c49-5fb3-4e73-a6a6-c0311af87523

 - !grant
   role: !layer example-org
   member: !layer example-space
diff --git a/inventory-app-entitlements.yml b/inventory-app-entitlements.yml
 - !permit
   resources: [ /business/inventory/db/user, /business/inventory/db/password ]
   privileges: [ read, execute ]
   role: !layer /pcf/example-org/example-space
diff --git a/load_policy.sh b/load_policy.sh
 conjur policy load pcf example-org.yml
 conjur policy load pcf/example-org example-space.yml
 conjur policy load apps inventory-app-entitlements.yml
	- !permit
	resources: [ /business/inventory/db/user, /business/inventory/db/password ]
	privileges: [ read, execute ]
	role: !layer /pcf/example-org/example-space
	conjur policy load pcf example-org.yml
	conjur policy load pcf/example-org example-space.yml
	conjur policy load apps inventory-app-entitlements.yml