Skip to content

Commit ac0189a

Browse files
authored
add missing Vault policy missing "list" capability (#2000)
Signed-off-by: pjuarezd <pjuarezd@users.noreply.github.com>
1 parent 54b8fc5 commit ac0189a

File tree

2 files changed

+2
-33
lines changed

2 files changed

+2
-33
lines changed

examples/vault/kes-policy.hcl

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
path "kv/my-minio/*" {
2-
capabilities = [ "create", "read", "delete" ]
2+
capabilities = [ "create", "read", "delete", "list" ]
33
}

testing/kes-config.yaml

Lines changed: 1 addition & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -8,41 +8,10 @@ stringData:
88
version: v1
99
address: 0.0.0.0:7373 # The pseudo address 0.0.0.0 refers to all network interfaces
1010
admin:
11-
identity: c84cc9b91ae2399b043da7eca616048d4b4200edf2ff418d8af3835911db945d
11+
identity: ${MINIO_KES_IDENTITY}
1212
tls:
1313
key: /tmp/kes/server.key
1414
cert: /tmp/kes/server.crt
15-
policy:
16-
my-app:
17-
allow:
18-
- /v1/key/create/*
19-
- /v1/key/import/*
20-
- /v1/key/delete/*
21-
- /v1/key/list/*
22-
- /v1/key/generate/*
23-
- /v1/key/decrypt/*
24-
- /v1/policy/describe/*
25-
- /v1/policy/assign/*
26-
- /v1/policy/write/*
27-
- /v1/policy/read/*
28-
- /v1/policy/list/*
29-
- /v1/policy/delete/*
30-
- /v1/identity/describe/*
31-
- /v1/identity/self/describe/*
32-
- /v1/identity/delete/*
33-
- /v1/identity/list/*
34-
- /v1/log/audit/*
35-
- /v1/log/error/*
36-
- /version/*
37-
- /v1/api/*
38-
- /v1/metrics/*
39-
- /v1/status/*
40-
- /v1/status
41-
- /v1/metrics
42-
- /v1/api
43-
- /version
44-
identities:
45-
- ${MINIO_KES_IDENTITY}
4615
cache:
4716
expiry:
4817
any: 5m0s

0 commit comments

Comments
 (0)