From 8ad9f0a664238ef7aca851e5c84faa9740b7ef4e Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Fri, 16 Jan 2026 03:20:32 -0300
Subject: [PATCH] vault: allow admin kv browse

---
 services/vault/scripts/vault_k8s_auth_configure.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh
index daf48b3..3a721c1 100644
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@@ -139,6 +139,12 @@ path "kv/data/atlas/vault/*" {
 path "kv/metadata/atlas/vault/*" {
   capabilities = ["list"]
 }
+path "kv/data/*" {
+  capabilities = ["create", "update", "read", "delete", "patch"]
+}
+path "kv/metadata/*" {
+  capabilities = ["read", "list", "delete"]
+}
 path "kv/data/atlas/shared/*" {
   capabilities = ["create", "update", "read", "patch"]
 }