openstack
/
charm-vault
Code Issues Proposed changes

Merge "policy: allow read of metadata for secret backend"

This commit is contained in:
Zuul 2018-10-23 16:16:21 +00:00 committed by Gerrit Code Review
parent 5019cca86d dc477f4d2f
commit f4bf636c87
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/lib/charm/vault.py
View File

@ -72,12 +72,18 @@ SECRET_BACKEND_HCL = """
path "{backend}/{hostname}/*" {{
capabilities = ["create", "read", "update", "delete", "list"]
}}
path "sys/internal/ui/mounts/{backend}" {{
capabilities = ["read"]
}}
"""
SECRET_BACKEND_SHARED_HCL = """
path "{backend}/*" {{
capabilities = ["create", "read", "update", "delete", "list"]
}}
path "sys/internal/ui/mounts/{backend}" {{
capabilities = ["read"]
}}
"""
VAULT_LOCALHOST_URL = "http://127.0.0.1:8220"
VAULT_HEALTH_URL = '{vault_addr}/v1/sys/health'