vault: allow admin policy to update shared secrets

2026-01-15 04:17:14 -03:00 · 2026-01-15 04:17:14 -03:00 · 5899c9acb3
commit 5899c9acb3
parent de6665c450
1 changed files with 6 additions and 0 deletions
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@ -133,6 +133,12 @@ path "kv/data/atlas/vault/*" {
 path "kv/metadata/atlas/vault/*" {
  capabilities = ["list"]
 }
+path "kv/data/atlas/shared/*" {
+  capabilities = ["create", "update", "read", "patch"]
+}
+path "kv/metadata/atlas/shared/*" {
+  capabilities = ["list"]
+}
 '

 write_raw_policy "vault-admin" "${vault_admin_policy}"