Good afternoon, try to write a script to create a policy and a role for it. Hvac and python are used to create the script. But the created role is not tied to politics. Tell me how you can fix the script
Script:
import hvac
client = hvac.Client(
url=‘http://10.0.1.54:8200’,
token=‘myroot’,
)
#client.sys.enable_auth_method(
method_type=‘jwt’,)
role_name = ‘hvac7’
allowed_redirect_uris = [‘http://10.0.1.54:8200/v1/auth/jwt/role/{role_name}’]
user_claim = ‘https://vault/user’
JWT
client.auth.jwt.create_role(
name=role_name,
role_type=‘jwt’,
allowed_redirect_uris=allowed_redirect_uris,
user_claim=‘sub’,
bound_audiences=[‘12345’],
)
policy = ‘’’
path “sys” {
capabilities = [“deny”]
}
path “secret” {
capabilities = [“create”, “read”, “update”, “delete”, “list”]
}
‘’’
client.sys.create_or_update_policy(
name=‘secret-writer’,
policy=policy,
)