Skip to content

Commit 89a206c

Browse files
rachavanRajesh Chavan
andauthored
Remove policy statement for WLMS access - Cherry pick PR 338 (#339)
Remove policy statement for WLMS access - Cherry pick PR 338 Co-authored-by: Rajesh Chavan <[email protected]>
1 parent a09c65c commit 89a206c

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

terraform/modules/policies/locals.tf

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -47,10 +47,9 @@ locals {
4747
cloning_policy_statement2 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to inspect compartments in tenancy"
4848
cloning_policy_statement = compact([local.cloning_policy_statement1, local.cloning_policy_statement2])
4949

50-
# These policy statements are required for enabling the plugin
50+
# These policy statements are required for disabling the OSMS plugin
5151
plugin_policy_statement1 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to manage instance-agent-plugins in compartment id ${var.compartment_id}"
52-
plugin_policy_statement2 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to use wlms-managed-instance-plugins in tenancy"
53-
plugin_policy_statement = compact([local.plugin_policy_statement1, local.plugin_policy_statement2])
52+
plugin_policy_statement = compact([local.plugin_policy_statement1])
5453

5554
# Policies required for enabling the OSMH plugin
5655
osmh_policy_statement1 = var.enable_osmh? "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to manage osmh-family in compartment id ${var.compartment_id}" : ""

0 commit comments

Comments
 (0)