From 7dd6b6e066976285c8d0ab48129151481fb494d0 Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Sat, 18 Jul 2026 08:21:25 -0300
Subject: [PATCH] vault: allow ui mount detail checks

---
 services/vault/scripts/vault_k8s_auth_configure.sh | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh
index f9ab8045d..0e956775d 100644
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@@ -149,6 +149,9 @@ path "sys/policies/acl/*" {
 path "sys/internal/ui/mounts" {
   capabilities = ["read"]
 }
+path "sys/internal/ui/mounts/*" {
+  capabilities = ["read"]
+}
 path "sys/mounts" {
   capabilities = ["read"]
 }
@@ -180,6 +183,12 @@ path "kv/metadata/atlas/shared/*" {
 
 write_raw_policy "vault-admin" "${vault_admin_policy}"
 dev_kv_policy='
+path "sys/internal/ui/mounts" {
+  capabilities = ["read"]
+}
+path "sys/internal/ui/mounts/*" {
+  capabilities = ["read"]
+}
 path "kv/metadata" {
   capabilities = ["list"]
 }