vault

# Access system health status
path "sys/health" {
  capabilities = ["read", "list"]
}

# Renew tokens
path "auth/token/renew" {
  capabilities = [ "update" ]
}

# Lookup tokens
path "auth/token/lookup" {
  capabilities = [ "update" ]
}

# Manage HD Wallet secrets
path "kv/opendax_hdwallet_seed" {
  capabilities = ["create", "read"]
}

path "kv/opendax_hdwallet_index" {
  capabilities = ["create", "read", "update"]
}

path "kv/opendax_hdwallet_footprint" {
  capabilities = ["create", "read", "update"]
}

path "kv/opendax_hdwallet_key_*" {
  capabilities = ["create", "read", "update"]
}