Venafi / vault-pki-monitor-venafi

Venafi PKI Monitoring Secrets Engine for HashiCorp Vault that enforces security policy and provides certificate visiblity to the enterprise.
Mozilla Public License 2.0
19 stars 9 forks source link

Roles are being created when they are defined in a Policy even if the create_role key is set to false #77

Open ricrodriguezg opened 3 years ago

ricrodriguezg commented 3 years ago

PROBLEM SUMMARY

While performing some test in order to set up the defaults_roles key in the default policy with the create_role key set to false it was observed that when adding a non-existing role, that role was being created and added to the defaults_roles key of the policy.

STEPS TO REPRODUCE

EXPECTED RESULTS The defaults_roles should point to nil since the specified role does not exist.

ACTUAL RESULTS

The is being created and is being added to the defaults_roles list of the default policy

ENVIRONMENT DETAILS

Vault v1.7.1
venafi-pki-monitor v0.9.0

COMMENTS/WORKAROUNDS None