mirrors/ceph-csi
1
0
Fork 0
mirror of https://github.com/ceph/ceph-csi.git synced 2024-12-18 11:00:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

deploy: add sys/mounts to Vault policy

Browse Source 
Add "sys/mounts" so that VaultBackendKey does not need to be set. The
libopenstorage API detects the version for the key-value store in Vault
by reading "sys/mounts". Without permissions to read this endpoint, the
VaultBackendKey is required to be configured.

Signed-off-by: Niels de Vos <ndevos@redhat.com>
This commit is contained in:
Niels de Vos 2020-11-18 16:53:39 +01:00 committed by mergify[bot]
parent 04586dc733
commit db6d376434
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
examples/kms/vault/vault.yaml
View File

@ -88,6 +88,10 @@ items:
path "secret/metadata/ceph-csi/*" { path "secret/metadata/ceph-csi/*" {
capabilities = ["read", "delete", "list"] capabilities = ["read", "delete", "list"]
} }
path "sys/mounts" {
capabilities = ["read"]
}
EOS EOS
# create a role # create a role