chore(jupyterhub): adjust vault token ttl and max-ttl

This commit is contained in:
Masaki Yatsu
2025-09-03 10:55:16 +09:00
parent 67dd348705
commit 22e73d9a3d
4 changed files with 58 additions and 33 deletions

View File

@@ -0,0 +1,30 @@
# User-specific policy for {username}
path "secret/data/jupyter/users/{username}/*" {
capabilities = ["create", "update", "read", "delete", "list"]
}
path "secret/metadata/jupyter/users/{username}/*" {
capabilities = ["list", "read", "delete", "update"]
}
path "secret/metadata/jupyter/users/{username}" {
capabilities = ["list"]
}
# Read access to shared resources
path "secret/data/jupyter/shared/*" {
capabilities = ["read", "list"]
}
path "secret/metadata/jupyter/shared" {
capabilities = ["list"]
}
# Token management capabilities
path "auth/token/lookup-self" {
capabilities = ["read"]
}
path "auth/token/renew-self" {
capabilities = ["update"]
}