Ben Vincent
fd03727ec2
move management of Vault back to tf_vault approle. for this, we need to create a number of policies that are missing. - add policies to manage consul secret engines - add policies to manage pki secret engines - add policies to manage kv secret engines - add policies to manage ssh secret engines
12 lines
164 B
YAML
12 lines
164 B
YAML
# Allow access to read pki/au/syd1 issuers
|
|
---
|
|
rules:
|
|
- path: "pki/au/syd1/issuer/*"
|
|
capabilities:
|
|
- read
|
|
- list
|
|
|
|
auth:
|
|
approle:
|
|
- tf_vault
|