17 lines
437 B
Plaintext
17 lines
437 B
Plaintext
# Manage the transit secrets engine
|
|
path "transit/keys/<%= @config['app']['name'].downcase %>_*" {
|
|
capabilities = ["create", "read", "list"]
|
|
}
|
|
# Decrypt Engines secrets
|
|
path "transit/decrypt/<%= @config['app']['name'].downcase %>_engines_*" {
|
|
capabilities = ["create", "read", "update"]
|
|
}
|
|
# Renew tokens
|
|
path "auth/token/renew" {
|
|
capabilities = ["update"]
|
|
}
|
|
# Lookup tokens
|
|
path "auth/token/lookup" {
|
|
capabilities = ["update"]
|
|
}
|