vault: allow admin raft snapshots

2026-07-18 13:40:04 -03:00 · 2026-07-18 13:40:04 -03:00 · cf95e9ca07
commit cf95e9ca07
parent 0b8f3a5751
1 changed files with 6 additions and 0 deletions
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@ -158,6 +158,12 @@ path "sys/mounts" {
 path "sys/mounts/auth/*" {
  capabilities = ["read", "update", "sudo"]
 }
+path "sys/storage/raft/configuration" {
+  capabilities = ["read"]
+}
+path "sys/storage/raft/snapshot" {
+  capabilities = ["read"]
+}
 path "kv/data/atlas/vault/*" {
  capabilities = ["read"]
 }