Files
vault/policies/transit_unseal_policy.hcl

7 lines
132 B
HCL

path "transit/decrypt/unseal-key" {
capabilities = ["update"]
}
path "transit/encrypt/unseal-key" {
capabilities = ["update"]
}