Added vault policy name for plugin

intelops · Mar 24, 2024 · bfeb3b6 · bfeb3b6
1 parent 4543fa1
commit bfeb3b6
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/charts/vault-cred/values.yaml b/charts/vault-cred/values.yaml
@@ -127,6 +127,26 @@ vaultPolicies:
         path "auth/kubernetes/login" {
           capabilities = ["create","read","update"]
         }
+  - name: vault-policy-plugin-cred-admin
+    data:
+      policyName: vault-policy-plugin-cred-admin
+      policyData: |
+        path "secret/data/plugin/*" {
+          capabilities = ["create","read","update","delete","list"]
+        }
+        path "auth/kubernetes/login" {
+          capabilities = ["create","read","update"]
+        }
+  - name: vault-policy-plugin-cred-read
+    data:
+      policyName: vault-policy-plugin-cred-read
+      policyData: |
+        path "secret/data/plugin/*" {
+          capabilities = ["read"]
+        }
+        path "auth/kubernetes/login" {
+          capabilities = ["create","read","update"]
+        }
 
 vaultRoles:
 #  - name: vault-role-read-all-creds