nomad
/
acme-to-vault
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Allow reading kv/service/acme-to-vault

This commit is contained in:
Daniel Berteaud 2023-10-16 13:37:25 +02:00
parent 84dc3078e2
commit bc01e4e772
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
vault/policies/acme-to-vault.hcl
View File

@ -11,3 +11,7 @@ path "[[ .vault.prefix ]]kv/data/service/[[ .acme.instance ]]/account/*" {
path "[[ .vault.prefix ]]kv/metadata/service/[[ .acme.instance ]]/account/*" {
capabilities = ["list","read"]
}
path "[[ .vault.prefix ]]kv/data/service/[[ .acme.instance ]]" {
capabilities = ["read"]
}