Vault Configuration

To configure Vault so that Lieutenant Operator can use it, follow these steps:

Visit https://yourvault/ui/vault/policies/acl and click Create ACL Policy. Then paste following policy into the field:

path "kv/data/*" {
  capabilities = ["read", "create", "update", "delete"]
}

path "kv/metadata/*" {
  capabilities = ["read", "create", "update", "delete", "list"]
}

path "kv/delete/*" {
  capabilities = ["update"]
}

Name it lieutenant-operator

Create a new secret engine by visiting https://yourvault/ui/vault/secrets and clicking on Enable new engine.
1. Select KV
2. Click next, the path needs to be kv and the Version needs to be 2
3. Click Enable Engine