小编3sk*_*sky的帖子

我无法理解如何secrets list工作。我有路径许可的政策。

path "sys/mounts/*" {
capabilities = ["create", "read", "update", "delete", "list","sudo"]
}

我可以运行启用和禁用标志

$ vault secrets enable -path=Test kv
Success! Enabled the kv secrets engine at: Test/
$ vault secrets disable Test
Success! Disabled the secrets engine (if it existed) at: Test/

但我不能运行列表或移动

vault secrets list
Error listing secrets engines: Error making API request.

URL: GET http://localhost:8200/v1/sys/mounts
Code: 403. Errors:

* permission denied

vault secrets move Test Test2
Error moving secrets engine Test/ to Test2/: Error making …