mirror of
https://github.com/hashicorp/vault.git
synced 2025-11-28 22:21:30 +01:00
docs/debug: add example policy for debug command (#20232)
This commit is contained in:
parent
4d3e220db9
commit
3faba5d905
@ -36,6 +36,34 @@ query the matching endpoint in order to get a proper response. Any errors
|
|||||||
encountered during capture due to permissions or otherwise will be logged in the
|
encountered during capture due to permissions or otherwise will be logged in the
|
||||||
index file.
|
index file.
|
||||||
|
|
||||||
|
The following policy can be used for generating debug packages with all targets:
|
||||||
|
|
||||||
|
```hcl
|
||||||
|
path "auth/token/lookup-self" {
|
||||||
|
capabilities = ["read"]
|
||||||
|
}
|
||||||
|
|
||||||
|
path "sys/pprof/*" {
|
||||||
|
capabilities = ["read"]
|
||||||
|
}
|
||||||
|
|
||||||
|
path "sys/config/state/sanitized" {
|
||||||
|
capabilities = ["read"]
|
||||||
|
}
|
||||||
|
|
||||||
|
path "sys/monitor" {
|
||||||
|
capabilities = ["read"]
|
||||||
|
}
|
||||||
|
|
||||||
|
path "sys/host-info" {
|
||||||
|
capabilities = ["read"]
|
||||||
|
}
|
||||||
|
|
||||||
|
path "sys/in-flight-req" {
|
||||||
|
capabilities = ["read"]
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
## Capture Targets
|
## Capture Targets
|
||||||
|
|
||||||
The `-target` flag can be specified multiple times to capture specific
|
The `-target` flag can be specified multiple times to capture specific
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user