railiance-platform/openbao/policies/workload-kv-read-email-connect-transactional-eso.hcl

16 lines
410 B
HCL
Raw Normal View History

# RPF-WP-0045: ESO delivery for ClusterSecretStore openbao-email-connect via
# Kubernetes auth role email-connect-transactional-eso
# (SA email-connect/email-connect-eso). One exact KV data read.
path "platform/data/workloads/email-connect/transactional" {
capabilities = ["read"]
}
path "auth/token/lookup-self" {
capabilities = ["read"]
}
path "auth/token/revoke-self" {
capabilities = ["update"]
}