Venafi / vault-pki-monitor-venafi

Venafi PKI Monitoring Secrets Engine for HashiCorp Vault that enforces security policy and provides certificate visiblity to the enterprise.
Mozilla Public License 2.0
19 stars 9 forks source link

Deleting a Policy does not delete configured defaults_roles #76

Open ricrodriguezg opened 3 years ago

ricrodriguezg commented 3 years ago

PROBLEM SUMMARY While deleting the default policy and re-creating it, it was observed that the previously configured default role was not being removed and even after deleting also the role, creating the policy and a role with the same name, it remained in the defaults_roles key of the default policy.

STEPS TO REPRODUCE

image

The association between the role and the policy persist even if both elements are deleted following these steps.

image

EXPECTED RESULTS The value of the defaults_roles key should be empty since the default policy is being re-created.

ACTUAL RESULTS The value of the defaults_roles key of the default policy points to the previously configured role.

ENVIRONMENT DETAILS