railiance-platform/openbao/policies/keycape-factor-renewer.hcl

12 lines
337 B
HCL
Raw Normal View History

# Dedicated renewable service password read and JWT-only publish.
path "platform/data/workloads/net-kingdom/keycape-factor-issuer" {
capabilities = ["read"]
}
path "platform/data/workloads/net-kingdom/keycape-factor-read" {
capabilities = ["read", "create", "update"]
}
path "auth/token/revoke-self" {
capabilities = ["update"]
}