From 69d48c7441f23fa9badf10cf8a76a71902d6e054 Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Sat, 18 Jul 2026 08:21:25 -0300
Subject: [PATCH] vault: allow ui mount detail checks

---
 services/vault/scripts/vault_k8s_auth_configure.sh | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh
index f9ab8045..0e956775 100644
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@@ -149,6 +149,9 @@ path "sys/policies/acl/*" {
 path "sys/internal/ui/mounts" {
   capabilities = ["read"]
 }
+path "sys/internal/ui/mounts/*" {
+  capabilities = ["read"]
+}
 path "sys/mounts" {
   capabilities = ["read"]
 }
@@ -180,6 +183,12 @@ path "kv/metadata/atlas/shared/*" {
 
 write_raw_policy "vault-admin" "${vault_admin_policy}"
 dev_kv_policy='
+path "sys/internal/ui/mounts" {
+  capabilities = ["read"]
+}
+path "sys/internal/ui/mounts/*" {
+  capabilities = ["read"]
+}
 path "kv/metadata" {
   capabilities = ["list"]
 }