wrong path on vault admin policy for policies management

in the admin vault policy the following path is defined to managed the policies:

# Create and manage system policies broadly across vault

path "sys/policies/*" {

capabilities = ["create", "read", "update", "delete", "list", "sudo"]

}

It is not the correct path. Indeed try to create a policy.redhatcop.redhat.io will has the following result:

message: "Error making API request.\n\nURL: GET https://vault.vault.svc.cluster.local:8200/v1/sys/policy/testpolicy\nCode:                                                                                 
  403. Errors:\n\n* 1 error occurred:\n\t* permission denied\n\n"

Correcting the admin policy with path "sys/policy/*" { solve that issue

Assignee Loading
Time tracking Loading