nomad
/
acme-to-vault
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Grant access to /certs of all services

This commit is contained in:
Daniel Berteaud 2023-12-09 23:05:41 +01:00
parent ee3cb24a67
commit c54f412228
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
variables.yml
View File

@ -5,7 +5,7 @@ acme:
instance: acme-to-vault
# The Docker image to use
image: danielberteaud/acme-to-vault:23.11-2
image: danielberteaud/acme-to-vault:23.12-1
# If a cron expression is defined, the service will stay running and renew certs.
# If an empty string, the container will exit after running once

4
vault/policies/acme-to-vault.hcl
View File

@ -1,7 +1,7 @@
path "[[ .vault.prefix ]]kv/data/service/traefik/certs/*" {
path "[[ .vault.prefix ]]kv/data/service/*/certs/*" {
capabilities = ["read","create","update"]
}
path "[[ .vault.prefix ]]kv/metadata/service/traefik/certs" {
path "[[ .vault.prefix ]]kv/metadata/service/*/certs" {
capabilities = ["list","read"]
}