monitoring/vault/policies/monitoring-prometheus.hcl

13 lines
344 B
HCL

[[- $c := merge .monitoring.prometheus .monitoring . ]]
path "[[ $c.vault.pki.path ]]/issue/[[ .instance ]]-prometheus" {
capabilities = ["update"]
}
path "[[ $c.vault.root ]]kv/service/[[ .instance ]]/prometheus" {
capabilities = ["read"]
}
path "[[ $c.vault.root ]]consul/creds/[[ .instance ]]-prometheus" {
capabilities = ["read"]
}