Chore: Refactor Authen

[guyzsarun]

No description provided.

[Copilot]

Pull Request Overview

This PR refactors the authentication configuration and policy management by removing the legacy policy module and consolidating policy definitions and user credentials within the authentication module. Key changes include the removal of the policy module, the introduction of dynamic user configuration via a JSON file in the userpass authentication configuration, and a new vault_policy resource that leverages a fileset for policy files.

Reviewed Changes

Copilot reviewed 7 out of 9 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
policy/main.tf	Removal of legacy policy resource to support refactored design
main.tf	Removal of the policy module and focus on the authentication module
authentication/userpass.tf	Dynamic user configuration via JSON and consolidated endpoint setup
authentication/templates/users.json.example	Addition of a sample JSON file for user configuration
authentication/templates/policy/admin_policy.hcl	Extension of policy content with updated certs capability
authentication/templates/default_template.tftpl	Update to use dynamic password in the template
authentication/policy.tf	New resource that dynamically loads policy files from a directory

Comments suppressed due to low confidence (1)

authentication/policy.tf:2

• The use of split on a dot to derive the policy name may be brittle if the file name does not contain a dot; consider a more robust naming strategy or add validation for the file naming convention.

  name     = split(".", each.value)[0]

[Copilot]

Ensure that the usernames in the users JSON are unique to prevent key collisions in the for_each mapping.

Suggested change

	for_each = { for user in local.users : user.username => user }
	for_each = local.unique_usernames