D4202.id11021.diff
No OneTemporary
Actions

Size

1006 B

Referenced Files

None

Subscribers

None

D4202.id11021.diff
View Options

	diff --git a/roles/vault/policies/files/admin.hcl b/roles/vault/policies/files/admin.hcl
	--- a/roles/vault/policies/files/admin.hcl
	+++ b/roles/vault/policies/files/admin.hcl
	@@ -33,6 +33,25 @@
	capabilities = ["create", "read", "update", "delete", "list", "sudo"]
	}

	+# -------------------------------------------------------------
	+# Storage management
	+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	+
	+# Allow taking and restoring Raft snapshots
	+path "sys/storage/raft/snapshot" {
	+ capabilities = ["read", "update", "sudo"]
	+}
	+
	+# Allow viewing Raft cluster configuration and peers
	+path "sys/storage/raft/configuration" {
	+ capabilities = ["read"]
	+}
	+
	+# Allow managing auto-snapshots if you use them
	+path "sys/storage/raft/snapshot-auto/*" {
	+ capabilities = ["read", "list", "update", "sudo"]
	+}
	+
	# -------------------------------------------------------------
	# Authentication management
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -