diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh index f9ab8045d..0e956775d 100644 --- a/services/vault/scripts/vault_k8s_auth_configure.sh +++ b/services/vault/scripts/vault_k8s_auth_configure.sh @@ -149,6 +149,9 @@ path "sys/policies/acl/*" { path "sys/internal/ui/mounts" { capabilities = ["read"] } +path "sys/internal/ui/mounts/*" { + capabilities = ["read"] +} path "sys/mounts" { capabilities = ["read"] } @@ -180,6 +183,12 @@ path "kv/metadata/atlas/shared/*" { write_raw_policy "vault-admin" "${vault_admin_policy}" dev_kv_policy=' +path "sys/internal/ui/mounts" { + capabilities = ["read"] +} +path "sys/internal/ui/mounts/*" { + capabilities = ["read"] +} path "kv/metadata" { capabilities = ["list"] }