From 8e8b52349b571b7075787a25d37eaf7c4f07b887 Mon Sep 17 00:00:00 2001 From: Theron Voran Date: Fri, 12 Aug 2022 11:02:38 -0700 Subject: [PATCH] update example policy (#68) The vault client uses `sys/policies/acl` instead of `sys/policy` now. --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 8e9b266e..be540ab3 100644 --- a/README.md +++ b/README.md @@ -397,7 +397,7 @@ path "sys/mounts/cf/*" { } # Create policies with the "cf-*" prefix -path "sys/policy/cf-*" { +path "sys/policies/acl/cf-*" { capabilities = ["create", "update", "delete"] } @@ -430,7 +430,7 @@ Cloud Foundry Vault Broker will renew this periodic token automatically. 1. Create the policy specific for the broker: ```shell - $ vault write sys/policy/cf-broker rules=@cf-broker.hcl + $ vault write cf-broker cf-broker.hcl ``` 1. Create a periodic token @@ -530,7 +530,7 @@ policy may be modified by a user with permissions in Vault to add additional capabilities. The default policy can be discovered by reading it: ```sh -$ vault read -field=rules sys/policy/cf- +$ vault policy read cf- # ... ```