Quico/vault-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix(docs): No need for a static group ID

Browse Source
This commit is contained in:
hygienic-books 2023-04-25 03:51:57 +02:00
parent 6402ad542e
commit 69e8d644dd
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
policies/remco/remco.hcl
View File

@ -1,8 +1,8 @@
# Allow listing secret parent-child connections (as in UI hierarchy). Subdir
# underneath 'kv' secrets engine will remain hidden though, user has to
# manually open up
# ${VAULT_ADDR}/ui/vault/secrets/kv/list/for_{{identity.groups.ids.83754fb4-ee24-fa6a-52dd-50ef8f1d6665.name}}
path "kv/metadata/for_{{identity.groups.ids.83754fb4-ee24-fa6a-52dd-50ef8f1d6665.name}}/*" {
# ${VAULT_ADDR}/ui/vault/secrets/kv/list/for_{{identity.groups.ids.GROUPID.name}}
path "kv/metadata/for_{{identity.groups.ids.GROUPID.name}}/*" {
capabilities = ["list"]
}
@ -12,7 +12,7 @@ path "kv/metadata/for_rbacgroup_remco/*" {
}
# Grant read-only access to secrets
path "kv/data/for_{{identity.groups.ids.83754fb4-ee24-fa6a-52dd-50ef8f1d6665.name}}/*" {
path "kv/data/for_{{identity.groups.ids.GROUPID.name}}/*" {
capabilities = ["read"]
}