D3270.id8417.diff
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

D3270.id8417.diff
View Options

	diff --git a/pillar/credentials/vault.sls b/pillar/credentials/vault.sls
	--- a/pillar/credentials/vault.sls
	+++ b/pillar/credentials/vault.sls
	@@ -50,6 +50,7 @@

	vault_policies:
	- admin
	+ - airflow
	- salt-primary
	- sentry
	- vault_bootstrap
	diff --git a/roles/vault/policies/files/airflow.hcl b/roles/vault/policies/files/airflow.hcl
	new file mode 100644
	--- /dev/null
	+++ b/roles/vault/policies/files/airflow.hcl
	@@ -0,0 +1,20 @@
	+# -------------------------------------------------------------
	+# Vault configuration - Policy for Apache Airflow
	+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	+# Project: Nasqueron
	+# License: Trivial work, not eligible to copyright
	+# Source file: roles/vault/vault/files/airflow.hcl
	+#
	+# Airflow realm: nasqueron
	+# -------------------------------------------------------------
	+#
	+# <auto-generated>
	+# This file is managed by our rOPS SaltStack repository.
	+#
	+# Changes to this file may cause incorrect behavior
	+# and will be lost if the state is redeployed.
	+# </auto-generated>
	+
	+path "apps/data/airflow/*" {
	+ capabilities = [ "read" ]
	+}