Lookup an Identity Group for Vault. The Identity secrets engine is the identity management solution for Vault. It internally maintains the clients who are recognized by Vault.
data "vault_identity_group" "group" {
group_name = "user"
}
The following arguments are supported:
namespace
- (Optional) The namespace of the target resource.
The value should not contain leading or trailing forward slashes.
The namespace
is always relative to the provider's configured namespace.
Available only for Vault Enterprise.
group_name
- (Optional) Name of the group.
group_id
- (Optional) ID of the group.
alias_id
- (Optional) ID of the alias.
alias_name
- (Optional) Name of the alias. This should be supplied in conjunction with
alias_mount_accessor
.
alias_mount_accessor
- (Optional) Accessor of the mount to which the alias belongs to.
This should be supplied in conjunction with alias_name
.
The lookup criteria can be group_name
, group_id
, alias_id
, or a combination of
alias_name
and alias_mount_accessor
.
Use of this resource requires the create
capability on /identity/lookup/group
.
The following attributes are exported:
data_json
- A string containing the full data payload retrieved from
Vault, serialized in JSON format.
creation_time
- Creation timestamp of the group
last_update_time
- Last updated time of the group
member_entity_ids
- List of Entity IDs which are members of this group
member_group_ids
- List of Group IDs which are members of this group
metadata
- Arbitrary metadata
modify_index
- Modify index of the group
namespace_id
- Namespace of which the group is part of
parent_group_ids
- List of Group IDs which are parents of this group.
policies
- List of policies attached to the group
type
- Type of group
alias_canonical_id
- Canonical ID of the Alias
alias_creation_time
- Creation time of the Alias
alias_last_update_time
- Last update time of the alias
alias_merged_from_canonical_ids
- List of canonical IDs merged with this alias
alias_metadata
- Arbitrary metadata
alias_mount_path
- Authentication mount path which this alias belongs to
alias_mount_type
- Authentication mount type which this alias belongs to