infra/vault/policies/cert-manager.hcl

13 lines
250 B
HCL

path "kv/data/acme" {
capabilities = ["read"]
}
path "kv/data/namecheap" {
capabilities = ["read"]
}
path "kv/data/aws" {
capabilities = ["read"]
}
path "pki_int/sign/masked-dot-name" {
capabilities = [ "create", "read", "list", "update" ]
}