railiance-platform/openbao/policies/secrets-engine-login-self.hcl

11 lines
258 B
HCL
Raw Normal View History

# RPF-WP-0035-T02: proposed login-only service policy; not a lane applier.
path "auth/token/lookup-self" {
capabilities = ["read"]
}
path "sys/capabilities-self" {
capabilities = ["update"]
}
path "auth/token/revoke-self" {
capabilities = ["update"]
}