gsadmin/rustguac
1
0
Fork 0
mirror of https://github.com/sol1/rustguac.git synced 2026-09-10 01:26:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Document Vault KV v2 metadata policy requirement for deletes (#54)

Browse Source 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Dave Kempe
2026-03-11 20:05:35 +11:00
parent 04111ab177
commit 5a5bd8ff75
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/integrations.md
+8
View File
@@ -128,15 +128,23 @@ vault secrets enable -path=secret kv-v2
```bash
vault policy write rustguac - <<'EOF'
# Address book entries: create, read, update, soft-delete
path "secret/data/rustguac/*" {
capabilities = ["create", "read", "update", "delete"]
}
# Folder/entry listing and permanent deletion
# - "list" + "read": browse the address book
# - "delete": permanently remove entries and folders
# (KV v2 permanent deletes go through the metadata/ path, not data/)
path "secret/metadata/rustguac/*" {
capabilities = ["list", "read", "delete"]
}
EOF
```
> **Note:** Both policy paths are required. A common mistake is omitting `delete` from the metadata path — this causes "vault access denied" errors when deleting entries or folders. See the [Vault KV v2 API docs](https://developer.hashicorp.com/vault/api-docs/secret/kv/kv-v2) for details on the `data/` vs `metadata/` path split.
**3. Enable AppRole auth** and create a role:
```bash