docs(meta): Don't use term 'role' for a policy (#1)

This commit is contained in:
2022-09-24 00:32:15 +02:00
parent 4efca88074
commit 0e285695e7
6 changed files with 0 additions and 0 deletions

View File

@@ -0,0 +1,12 @@
# Allow listing secret parent-child connections (as in UI hierarchy). Subdir
# underneath 'kv' secrets engine will remain hidden though, user has to
# manually open up
# ${VAULT_ADDR}/ui/vault/secrets/kv/list/for_{{identity.groups.ids.GROUPID.name}}
path "kv/metadata/for_{{identity.groups.ids.GROUPID.name}}/*" {
capabilities = ["list"]
}
# Grant read-only access to secrets
path "kv/data/for_{{identity.groups.ids.GROUPID.name}}/*" {
capabilities = ["read"]
}