60 lines
1.1 KiB
HCL
60 lines
1.1 KiB
HCL
path "transit/*" {
|
|
capabilities = ["create", "read", "update", "delete", "list"]
|
|
}
|
|
|
|
path "kv/data/dev/workload/*" {
|
|
capabilities = ["create", "read", "update", "delete", "list"]
|
|
}
|
|
|
|
path "kv/metadata/dev/workload/*" {
|
|
capabilities = ["read", "delete", "list"]
|
|
}
|
|
|
|
path "sys/internal/ui/mounts/*" {
|
|
capabilities = ["read"]
|
|
}
|
|
|
|
path "sys/mounts/*" {
|
|
capabilities = ["create", "read", "update", "delete", "list", "sudo"]
|
|
}
|
|
|
|
path "sys/auth/*" {
|
|
capabilities = ["create", "read", "update", "delete", "list", "sudo"]
|
|
}
|
|
|
|
path "sys/policies/acl/*" {
|
|
capabilities = ["create", "read", "update", "delete", "list"]
|
|
}
|
|
|
|
path "auth/approle/*" {
|
|
capabilities = ["create", "read", "update", "delete", "list"]
|
|
}
|
|
|
|
path "auth/token/create" {
|
|
capabilities = ["update"]
|
|
}
|
|
|
|
path "auth/token/create-orphan" {
|
|
capabilities = ["update"]
|
|
}
|
|
|
|
path "auth/token/revoke" {
|
|
capabilities = ["update"]
|
|
}
|
|
|
|
path "auth/token/revoke-accessor" {
|
|
capabilities = ["update"]
|
|
}
|
|
|
|
path "auth/token/lookup" {
|
|
capabilities = ["update"]
|
|
}
|
|
|
|
path "auth/token/lookup-accessor" {
|
|
capabilities = ["update"]
|
|
}
|
|
|
|
path "auth/token/lookup-self" {
|
|
capabilities = ["read"]
|
|
}
|