services/vault
1
0
Fork 0
Code Issues 3 Pull Requests Projects Releases Wiki Activity

Give ducoterra access to ssh key signing

Browse Source 
ducoterra can now sign ssh keys.
This commit is contained in:
ducoterra
2021-07-18 21:17:19 -04:00
parent 6b1bf33897
commit ac1d3c16df
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
policies/ducoterra.hcl
View File

@@ -14,10 +14,18 @@ path "dnet_inter/*" {
capabilities = ["create", "read", "update", "delete", "list"] capabilities = ["create", "read", "update", "delete", "list"]
} }
path "ssh-client-signer/*" { path "ssh-client-signer/sign/*" {
capabilities = ["create", "read", "update", "delete", "list"] capabilities = ["create", "read", "update", "delete", "list"]
} }
path "ssh-host-signer/*" { path "ssh-client-signer/roles/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "ssh-host-signer/sign/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "ssh-host-signer/roles/*" {
capabilities = ["create", "read", "update", "delete", "list"] capabilities = ["create", "read", "update", "delete", "list"]
} }