baschno/buun-stack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(jupyterhub): fix vault policy

Browse Source
This commit is contained in:
Masaki Yatsu
2025-08-31 21:17:03 +09:00
parent 2480ebae82
commit 1e9d9520e9
2 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
jupyterhub/vault-policy.hcl
View File

@@ -5,6 +5,11 @@ path "secret/data/jupyter/shared/*" {
capabilities = ["read", "list"]
}
# Allow users to list shared directory
path "secret/metadata/jupyter/shared" {
capabilities = ["list"]
}
# Full access to user-specific paths
path "secret/data/jupyter/users/{{identity.entity.aliases.auth_jwt_*.metadata.username}}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
@@ -15,7 +20,7 @@ path "secret/metadata/jupyter/users/{{identity.entity.aliases.auth_jwt_*.metadat
capabilities = ["list", "read", "delete"]
}
# Allow users to list jupyter root to navigate
path "secret/metadata/jupyter/*" {
# Allow users to list only their own user directory for navigation
path "secret/metadata/jupyter/users/{{identity.entity.aliases.auth_jwt_*.metadata.username}}" {
capabilities = ["list"]
}