traefik/vault/policies/traefik.hcl

17 lines
459 B
HCL

# Get a consul token
path "[[ .vault.root ]]consul/creds/[[ .instance ]]" {
capabilities = ["read"]
}
# Read traefik specific settings
path "[[ .vault.root ]]kv/data/service/[[ .instance ]]" {
capabilities = ["read", "list"]
}
# List and read traefik basic auth &cie
path "[[ .vault.root ]]kv/metadata/service/[[ .instance ]]/*" {
capabilities = ["list","read"]
}
path "[[ .vault.root ]]kv/data/service/[[ .instance ]]/*" {
capabilities = ["read"]
}