diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh index daf0214..46086cf 100644 --- a/services/vault/scripts/vault_k8s_auth_configure.sh +++ b/services/vault/scripts/vault_k8s_auth_configure.sh @@ -133,6 +133,12 @@ path "kv/data/atlas/vault/*" { path "kv/metadata/atlas/vault/*" { capabilities = ["list"] } +path "kv/data/atlas/shared/*" { + capabilities = ["create", "update", "read", "patch"] +} +path "kv/metadata/atlas/shared/*" { + capabilities = ["list"] +} ' write_raw_policy "vault-admin" "${vault_admin_policy}"