salt-primary.hcl
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

salt-primary.hcl
View Options

	# -------------------------------------------------------------
	# Vault configuration - Policy for salt primary server
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Project: Nasqueron
	# License: Trivial work, not eligible to copyright
	# Source file: roles/vault/vault/files/salt_primary.hcl
	# -------------------------------------------------------------
	#
	# <auto-generated>
	# This file is managed by our rOPS SaltStack repository.
	#
	# Changes to this file may cause incorrect behavior
	# and will be lost if the state is redeployed.
	# </auto-generated>

	# -------------------------------------------------------------
	# Policies management
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

	path "sys/policies/acl" {
	capabilities = ["list"]
	}

	path "sys/policies/acl/*" {
	capabilities = ["create", "read", "update", "delete", "list", "sudo"]
	}

	path "sys/policy" {
	capabilities = ["list"]
	}

	path "sys/policy/*" {
	capabilities = ["create", "read", "update", "delete", "list", "sudo"]
	}

	# -------------------------------------------------------------
	# Tokens management
	#
	# :: Create, check, revoke tokens to be used by nodes through Salt
	# :: Manage and renew own token
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

	path "auth/token/create/salt-node-*" {
	capabilities = ["update"]
	}

	path "auth/token/roles/salt-node-*" {
	capabilities = ["read"]
	}

	path "auth/token/lookup-self" {
	capabilities = ["read"]
	}

	path "auth/token/renew-self" {
	capabilities = ["update"]
	}

	path "auth/token/lookup" {
	capabilities = ["update"]
	}

	path "auth/token/revoke-accessor" {
	capabilities = ["update"]
	}

	path "sys/capabilities-self" {
	capabilities = ["update"]
	}

	path "transit/keys/*"{
	capabilities = ["create"]
	}

File Metadata

Mime Type: text/plain
Expires: Mon, Sep 14, 16:05 (13 h, 25 m)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 3942190
Default Alt Text: salt-primary.hcl (1 KB)

salt-primary.hclNo OneTemporaryActions

salt-primary.hclView Options

File Metadata

Event Timeline

salt-primary.hcl
No OneTemporary
Actions

salt-primary.hcl
View Options