From 50680b8740ee41bf6da2e15c7000eac44187535b Mon Sep 17 00:00:00 2001 From: Curtis Allen Date: Fri, 2 Oct 2015 09:06:42 -0600 Subject: [PATCH] update acl example Without `auth/token/lookup-self` read access you are unable to authenticate. Update example to work as well as use new command output. --- website/source/intro/getting-started/acl.html.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/website/source/intro/getting-started/acl.html.md b/website/source/intro/getting-started/acl.html.md index 446affbe81..6f967297cc 100644 --- a/website/source/intro/getting-started/acl.html.md +++ b/website/source/intro/getting-started/acl.html.md @@ -37,6 +37,10 @@ path "secret/*" { path "secret/foo" { policy = "read" } + +path "auth/token/lookup-self" { + policy = "read" +} ``` The policy format uses a prefix matching system on the API path @@ -73,7 +77,11 @@ back to a root user later. ``` $ vault token-create -policy="secret" -d97ef000-48cf-45d9-1907-3ea6ce298a29 +Key Value +token d97ef000-48cf-45d9-1907-3ea6ce298a29 +token_duration 2592000 +token_renewable true +token_policies [secret] $ vault auth d97ef000-48cf-45d9-1907-3ea6ce298a29 Successfully authenticated! The policies that are associated