Created
January 7, 2021 15:55
-
-
Save sshastri/f0832c539ea79b6b952d58e5b4f5ec32 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# from HashiCorp website | |
# Manage auth methods broadly across Vaults | |
path "auth/*" | |
{ | |
capabilities = ["create", "read", "update", "delete", "list", "sudo"] | |
} | |
# Create, update, and delete auth methods | |
path "sys/auth/*" | |
{ | |
capabilities = ["create", "update", "delete", "sudo"] | |
} | |
# List auth methods | |
path "sys/auth" | |
{ | |
capabilities = ["read"] | |
} | |
# List existing policies | |
path "sys/policies/acl" | |
{ | |
capabilities = ["list"] | |
} | |
# Create and manage ACL policies | |
path "sys/policies/acl/*" | |
{ | |
capabilities = ["create", "read", "update", "delete", "list", "sudo"] | |
} | |
# List, create, update, and delete key/value secrets | |
path "secret/*" | |
{ | |
capabilities = ["create", "read", "update", "delete", "list", "sudo"] | |
} | |
# Manage secret engines | |
path "sys/mounts/*" | |
{ | |
capabilities = ["create", "read", "update", "delete", "list", "sudo"] | |
} | |
# List existing secret engines. | |
path "sys/mounts" | |
{ | |
capabilities = ["read"] | |
} | |
# Give the ability to revoke tokens. | |
path "sys/leases/*" | |
{ | |
capabilities = ["create", "read", "update", "delete", "list", "sudo"] | |
} | |
# Read health checks | |
path "sys/health" | |
{ | |
capabilities = ["read", "sudo"] | |
} | |
# Need for Rotating | |
path "sys/rotate" | |
{ | |
capabilities = ["update", "sudo"] | |
} | |
# Need for Rotating | |
path "sys/key-status" | |
{ | |
capabilities = ["read", "sudo"] | |
} | |
# Use vault monitor command | |
path "sys/monitor" | |
{ | |
capabilities = ["read"] | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment