nomad
/
acme-to-vault
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Adapt vault.prefix -> vault.root

This commit is contained in:
Daniel Berteaud 2024-01-31 11:55:24 +01:00
parent bcd825b82c
commit 0879c92ad4
2 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
example/vault/policies/acme-to-vault.hcl
View File

@ -1,17 +1,17 @@
path "kv/data/service/+/certs/*" {
path "/kv/data/service/+/certs/*" {
capabilities = ["read","create","update"]
}
path "kv/metadata/service/+/certs" {
path "/kv/metadata/service/+/certs" {
capabilities = ["list","read"]
}
path "kv/data/service/acme-to-vault/account/*" {
path "/kv/data/service/acme-to-vault/account/*" {
capabilities = ["read","create","update"]
}
path "kv/metadata/service/acme-to-vault/account/*" {
path "/kv/metadata/service/acme-to-vault/account/*" {
capabilities = ["list","read"]
}
path "kv/data/service/acme-to-vault" {
path "/kv/data/service/acme-to-vault" {
capabilities = ["read"]
}

10
vault/policies/acme-to-vault.hcl
View File

@ -1,17 +1,17 @@
path "[[ .vault.prefix ]]kv/data/service/+/certs/*" {
path "[[ .vault.root ]]kv/data/service/+/certs/*" {
capabilities = ["read","create","update"]
}
path "[[ .vault.prefix ]]kv/metadata/service/+/certs" {
path "[[ .vault.root ]]kv/metadata/service/+/certs" {
capabilities = ["list","read"]
}
path "[[ .vault.prefix ]]kv/data/service/[[ .instance ]]/account/*" {
path "[[ .vault.root ]]kv/data/service/[[ .instance ]]/account/*" {
capabilities = ["read","create","update"]
}
path "[[ .vault.prefix ]]kv/metadata/service/[[ .instance ]]/account/*" {
path "[[ .vault.root ]]kv/metadata/service/[[ .instance ]]/account/*" {
capabilities = ["list","read"]
}
path "[[ .vault.prefix ]]kv/data/service/[[ .instance ]]" {
path "[[ .vault.root ]]kv/data/service/[[ .instance ]]" {
capabilities = ["read"]
}