Ben Vincent
f78416361b
- add approle for terraform, tf_vault - add policices to manage terraform access to vault - add policices for default access to vault from ldap users
15 lines
368 B
HCL
15 lines
368 B
HCL
# Allow access to manage secret engines (mount, unmount, update)
|
|
path "sys/mounts/*" {
|
|
capabilities = ["create", "update", "delete", "read", "list"]
|
|
}
|
|
|
|
# Allow tuning existing secret engines
|
|
path "sys/mounts-tune/*" {
|
|
capabilities = ["update", "read"]
|
|
}
|
|
|
|
# Allow reaing and listing of enabled secret engines
|
|
path "sys/mounts" {
|
|
capabilities = ["read", "list"]
|
|
}
|