{"action":"opened","issue":{"url":"https://api.github.com/repos/carlpett/salt-vault/issues/14","repository_url":"https://api.github.com/repos/carlpett/salt-vault","labels_url":"https://api.github.com/repos/carlpett/salt-vault/issues/14/labels{/name}","comments_url":"https://api.github.com/repos/carlpett/salt-vault/issues/14/comments","events_url":"https://api.github.com/repos/carlpett/salt-vault/issues/14/events","html_url":"https://github.com/carlpett/salt-vault/issues/14","id":206300196,"number":14,"title":"Support for list grains","user":{"login":"mchugh19","id":1360357,"avatar_url":"https://avatars.githubusercontent.com/u/1360357?v=3","gravatar_id":"","url":"https://api.github.com/users/mchugh19","html_url":"https://github.com/mchugh19","followers_url":"https://api.github.com/users/mchugh19/followers","following_url":"https://api.github.com/users/mchugh19/following{/other_user}","gists_url":"https://api.github.com/users/mchugh19/gists{/gist_id}","starred_url":"https://api.github.com/users/mchugh19/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mchugh19/subscriptions","organizations_url":"https://api.github.com/users/mchugh19/orgs","repos_url":"https://api.github.com/users/mchugh19/repos","events_url":"https://api.github.com/users/mchugh19/events{/privacy}","received_events_url":"https://api.github.com/users/mchugh19/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-02-08T19:32:40Z","updated_at":"2017-02-08T19:32:40Z","closed_at":null,"body":"It would be great if the policy mapping code could support list grains. \r\n\r\nIn the case of:\r\n`saltstack/minion/{grains[ec2_tags][Environment]}/{grains[ec2_roles]}`\r\n\r\nthe ec2_roles grain is a list assigned from AWS tags. As such, it would be useful to have vault policies assigned for each value in the list. As it is this maps to:\r\n```\r\n# salt-run vault.show_policies ip-10-241-1-117.ec2.internal\r\n- saltstack/minions\r\n- saltstack/minion/ip-10-241-1-117.ec2.internal\r\n- saltstack/minion/crankcase/['landingzone', 'clusternode']\r\n```\r\n\r\nWhere, it would be helpful to have it map instead to:\r\n```\r\n...\r\n- saltstack/minion/crankcase/landingzone\r\n- saltstack/minion/crankcase/clusternode\r\n```\r\n"}}
{"actor":{"display_login":"mchugh19"}}