upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-06-09 00:33:28 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 11

Fix description of parameter value globbing (#4131)

Browse source
This commit is contained in:
Jim Kalafut 2018-03-14 14:03:00 -07:00 committed by Jeff Mitchell
parent 1adda15299
commit 17ed6663f7
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
website/source/docs/concepts/policies.html.md
View file

@ -269,7 +269,7 @@ options are:
```
* If any keys are specified, all non-specified parameters will be denied
unless there the parameter `"*"` is set to an empty array, which will
unless the parameter `"*"` is set to an empty array, which will
allow all other parameters to be modified. Parameters with specific values
will still be restricted to those values.
@ -338,15 +338,18 @@ Parameter values also support prefix/suffix globbing. Globbing is enabled by
prepending or appending or prepending a splat (`*`) to the value:
```ruby
# Allow any parameter as long as the value starts with "foo-*".
# Only allow a parameter named "bar" with a value starting with "foo-*".
path "secret/foo" {
capabilities = ["create"]
allowed_parameters = {
"*" = ["foo-*"]
"bar" = ["foo-*"]
}
}
```
Note: the only value that can be used with the `*` parameter is `[]`.
### Required Response Wrapping TTLs
These parameters can be used to set minimums/maximums on TTLs set by clients