Merge pull request #9917 from Ranjandas/docs/exec-cmd-acl

Document agent token policy requirement for rexec
hashicorp · Mar 25, 2021 · 6544539 · 6544539
1 parent e40940f
commit 6544539
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/website/content/commands/exec.mdx b/website/content/commands/exec.mdx
@@ -41,6 +41,8 @@ execute this command.
 | `key:write`     | `"_rexec"` prefix |
 | `event:write`   | `"_rexec"` prefix |
 
+In addition to the above, the policy associated with the [agent token](https://www.consul.io/docs/security/acl/acl-system#acl-agent-token) should have `write` on `"_rexec"` key prefix. This is for the agents to read the `exec` command and write its output back to the KV store.
+
 ## Usage
 
 Usage: `consul exec [options] [-|command...]`