vault: allow UI mount listing for admins

2026-01-16 02:06:31 -03:00 · 2026-01-16 02:06:31 -03:00 · f5231d282b
commit f5231d282b
parent bb1bf3c017
1 changed files with 6 additions and 0 deletions
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@ -124,6 +124,12 @@ path "sys/policies/acl" {
 path "sys/policies/acl/*" {
  capabilities = ["create", "update", "read"]
 }
+path "sys/internal/ui/mounts" {
+  capabilities = ["read"]
+}
+path "sys/mounts" {
+  capabilities = ["read"]
+}
 path "sys/mounts/auth/*" {
  capabilities = ["read", "update", "sudo"]
 }