Is there a way to terraform an approle auth backend with seal wrapping turned on? I don’t see the option in the vault_auth_backend resource. In fact, the only method I can find to enable it on the auth backend is in the UI, which seems to send a seal_wrap argument in the request payload when it posts to /v1/sys/auth/approle.
I think you want vault_approle_auth_backend_role_secret_id with wrapping_ttl
Yes, I was conflating seal wrapping with response wrapping. It appears that seal wrapping requires Vault Enterprise. It’s interesting that the option to turn it on is there in the OSS version of the UI. Thanks for the tip.