Add clarifying comment about connect CA policy

hashicorp · Nov 22, 2021 · f957474 · f957474
1 parent 6333008
commit f957474
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/acceptance/tests/vault/vault_test.go b/acceptance/tests/vault/vault_test.go
@@ -20,6 +20,8 @@ path "consul/data/secret/gossip" {
   capabilities = ["read"]
 }`
 
+	// connectCAPolicy allows Consul to bootstrap all certificates for the service mesh in Vault.
+	// Adapted from https://www.consul.io/docs/connect/ca/vault#consul-managed-pki-paths.
 	connectCARules = `
 path "/sys/mounts" {
   capabilities = [ "read" ]