2020-07-22 18:07:51 +00:00
|
|
|
---
|
|
|
|
|
layout: docs
|
|
|
|
|
page_title: Sentinel - Configuration
|
|
|
|
|
sidebar_title: <code>sentinel</code>
|
|
|
|
|
description: |-
|
|
|
|
|
The sentinel stanza specifies configurations for Vault's Sentinel integration.
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# `sentinel` Stanza
|
|
|
|
|
|
2020-12-17 21:53:33 +00:00
|
|
|
The sentinel stanza specifies configurations for
|
2020-07-27 14:52:46 +00:00
|
|
|
[Vault's Sentinel](https://www.vaultproject.io/docs/enterprise/sentinel) integration.
|
2020-07-22 18:07:51 +00:00
|
|
|
|
|
|
|
|
```hcl
|
|
|
|
|
sentinel {
|
|
|
|
|
additional_enabled_modules = ["http"]
|
|
|
|
|
}
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Requirements
|
|
|
|
|
|
|
|
|
|
A valid Vault Enterprise license is required for use of Sentinel policies.
|
|
|
|
|
|
|
|
|
|
## `sentinel` Parameters
|
|
|
|
|
|
|
|
|
|
The sentinel stanza currently supports only one parameter, `additional_enabled_modules`.
|
|
|
|
|
|
2020-07-27 14:52:46 +00:00
|
|
|
- `additional_enabled_modules` `(string array: [])`` - This parameter specifies a list of imports (modules)
|
2020-12-17 21:53:33 +00:00
|
|
|
to allow in Sentinel policies.
|
2020-07-22 18:07:51 +00:00
|
|
|
|
2020-07-27 14:52:46 +00:00
|
|
|
Vault currently enables all of Sentinel's [standard imports](https://docs.hashicorp.com/sentinel/imports/)
|
|
|
|
|
except the "http" import, which has performance and security implications. In the future, if any new Sentinel
|
|
|
|
|
imports are not automatically enabled by Vault, users could enable them in this stanza.
|
|
|
|
|
Note that this setting cannot be used to load custom import plugins.
|
|
|
|
|
|
|
|
|
|
~> **Warning**: Care should be taken when enabling imports (modules) which
|
2020-12-17 21:53:33 +00:00
|
|
|
could have performance and security implications in policies. Enabling the "http" import could cause your Vault
|
2020-07-27 14:52:46 +00:00
|
|
|
servers to submit outbound requests to arbitrary endpoints.
|
2020-12-17 21:53:33 +00:00
|
|
|
See the
|
|
|
|
|
[Sentinel HTTP Import](https://docs.hashicorp.com/sentinel/imports/http/)
|
2020-07-27 14:52:46 +00:00
|
|
|
documentation for more information.
|
