Add sync paths to restricted list (#27428)

* Fix sync config path

* Use full sync activate path
This commit is contained in:
Robert
2024-06-18 13:59:28 -05:00
committed by GitHub
parent 4078417016
commit b48045fd98

View File

@@ -6,6 +6,7 @@
API path | Root | Admin
------------------------------------------- | ---- | -----
`sys/activation-flags/secrets-sync/activate`| YES | NO
`sys/audit` | YES | NO
`sys/audit-hash` | YES | YES
`sys/config/auditing/*` | YES | NO
@@ -54,6 +55,7 @@ API path | Root | Admin
`sys/sealwrap/rewrap` | YES | NO
`sys/step-down` | YES | NO
`sys/storage` | YES | NO
`sys/sync/config | YES | YES
`sys/unseal` | YES | NO
Privileged CLI commands without public API endpoints: