tidy up approle creation.

echo "provision auth/approle/role/*.json"

provision -p auth/approle/role $data_dir/auth/approle/role/*.json

# Provision templated roles for project and group. If a role doesn't exist, create it; otherwise, update.

# Provision templated roles for projects and groups. If a role doesn't exist, create it; otherwise, update.

# Policies are already defined and created with provision-policies.sh.

for secret_path in $(cat $data_dir/secret/projects $data_dir/secret/groups) ; do

      project_category=$( dirname ${secret_path} ) # e.g. groups, projects

      project=$( basename ${secret_path} ) # e.g. et, sws, tcg, anchorage

      # generate viewer role policy

      # generate viewer role policy name

      project_viewer_policy=$(generate_project_policy_name $data_dir/sys/policy-templates/$project_category/${project_category}-viewer-policy-name.json $project)

      # project_viewer_filename=$(generate_project_policy_name $data_dir/sys/policy-templates/$project_category/${project_category}-viewer-policy-name.json $project).hcl

      # - generate token role

      # generate_token_role $data_dir/auth/token/roles-templates/orphan.json $project_viewer_policy $project_viewer_policy > $GEN_ROLES_DIR/${project_viewer_policy}.json

      # - generate default approle for groups and projects - remove last chars of project_catergrory so that "groups" become "group", "projects" "project" for rolename.

      project_approle_viewer=$(generate_approle $data_dir/auth/approle/role-templates/default-viewer.json ${project_category}/$project_viewer_policy > $GEN_APPROLES_DIR/${project_category%?}-${project_viewer_policy}.json)

      generate_approle $data_dir/auth/approle/role-templates/default-viewer.json ${project_category}/$project_viewer_policy > $GEN_APPROLES_DIR/${project_category%?}-${project_viewer_policy}.json

done

provision -p auth/approle/role ${TMPDIR}/auth/approle/role-generated/*.json