Files
project-gitops/runbooks/vault-transit/dev/policies/vault-transit-admin-dev.hcl
T

40 lines
788 B
HCL

path "transit/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "kv/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "sys/internal/ui/mounts/*" {
capabilities = ["read"]
}
path "sys/mounts/*" {
capabilities = ["create", "read", "update", "delete", "list", "sudo"]
}
path "sys/auth/*" {
capabilities = ["create", "read", "update", "delete", "list", "sudo"]
}
path "sys/policies/acl/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "auth/approle/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "auth/token/create-orphan" {
capabilities = ["update"]
}
path "auth/token/revoke" {
capabilities = ["update"]
}
path "auth/token/lookup" {
capabilities = ["update"]
}