diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh
index 731494c1..f9545c96 100644
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@@ -257,6 +257,8 @@ write_policy_and_role "hermes" "hermes" "hermes-vault,hermes-triage" \
   "hermes/triage-oidc hermes/agent-tokens" ""
 write_policy_and_role "hermes-agent" "hermes" "hermes-agent,hermes-switchyard" \
   "hermes/agent-oidc hermes/agent-tokens hermes/chat-telegram hermes/developer-keycloak hermes/developer-gitea hermes/developer-harbor hermes/developer-jenkins hermes/developer-ssh" ""
+write_policy_and_role "hermes-node-ssh" "hermes" "hermes-node-ssh-access" \
+  "hermes/developer-ssh" ""
 write_policy_and_role "hermes-chat" "hermes" "hermes-chat" \
   "hermes/chat-oidc hermes/chat-telegram hermes/agent-tokens" ""
 write_policy_and_role "veles" "veles" "veles-backend,veles-generator,veles-postgres,veles-vault-sync" \