bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vault: allow ui mount detail checks

Browse Source
This commit is contained in:
jenkins 2026-07-18 08:21:25 -03:00
parent b1b23232b1
commit 7dd6b6e066
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
services/vault/scripts/vault_k8s_auth_configure.sh
View File

@ -149,6 +149,9 @@ path "sys/policies/acl/*" {
path "sys/internal/ui/mounts" { path "sys/internal/ui/mounts" {
capabilities = ["read"] capabilities = ["read"]
} }
path "sys/internal/ui/mounts/*" {
capabilities = ["read"]
}
path "sys/mounts" { path "sys/mounts" {
capabilities = ["read"] capabilities = ["read"]
} }
@ -180,6 +183,12 @@ path "kv/metadata/atlas/shared/*" {
write_raw_policy "vault-admin" "${vault_admin_policy}" write_raw_policy "vault-admin" "${vault_admin_policy}"
dev_kv_policy=' dev_kv_policy='
path "sys/internal/ui/mounts" {
capabilities = ["read"]
}
path "sys/internal/ui/mounts/*" {
capabilities = ["read"]
}
path "kv/metadata" { path "kv/metadata" {
capabilities = ["list"] capabilities = ["list"]
} }