25 lines
521 B
HCL
25 lines
521 B
HCL
# Allow listing secret parent-child connections (as in UI hierarchy)
|
|
path "kv/metadata/*"
|
|
{
|
|
capabilities = ["list"]
|
|
}
|
|
|
|
# Allow creation of new secrets and writing new versions for existing ones
|
|
path "kv/data/*"
|
|
{
|
|
capabilities = ["create", "update"]
|
|
}
|
|
|
|
# Allow viewing secret metadata such as whether or not versions of a secrets
|
|
# exist anf if so how many.
|
|
# path "kv/metadata/*"
|
|
# {
|
|
# capabilities = ["read"]
|
|
# }
|
|
|
|
# Allow seeing/retrieving plain-text secrets
|
|
# path "kv/data/*"
|
|
# {
|
|
# capabilities = ["read"]
|
|
# }
|