[Secure Consul Ph. 2] Implement create/update policies and roles in Consul bootstrapper

[jim-wang-intel]

🚀 Feature Request

Relevant Package

This feature request is for Consul bootstrapper

Description

Based on ADR: Consul bootstrapper will install a role in Vault that creates global-management tokens in Consul with no TTL.
This will require to create a step or implementation for setupRegistryACL to install a role to Vault's consul secret engine.

Describe the solution you'd like

1. In this step we would like to associate the management toke or agent token with a role and the creating/updating of this role can be done via Vault's Consul secret engine API /consul/role/<name> details please see https://www.vaultproject.io/api/secret/consul#create-update-role
2. the policy still associate with whatever policy was set with the agent token, in which is mgmt type of role
3. Note: before switching the agent's default_policy to "deny", we should create an agent server policy (including node/key type of ACL properties) and also create a role associate with that policy. We can call this EdgeX agent (or node) policy.
4. One example of node/agent server policy looks something like:

# HCL definition for Consul server agent policy
node "" {
  policy = "write"
}
agent "" {
  policy = "write"
}
service "" {
  policy = "read"
}
node_prefix "" {
  policy = "write"
}
service_prefix "" {
  policy = "read"
}
# allow kv put
key_prefix "" {
  policy = "write"
}

Describe alternatives you've considered

Have you considered any alternative solutions or workarounds?