From 8fa68e267043786d652afdab3928ef344c11d245 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sun, 15 Feb 2026 20:16:58 +1100
Subject: [PATCH] chore: enable access to openldap admin creds

- ensure terraform_ldap can read ldap admin credentials
---
 policies/kv/service/openldap/ldap_admin_password/read.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policies/kv/service/openldap/ldap_admin_password/read.yaml b/policies/kv/service/openldap/ldap_admin_password/read.yaml
index ede3b98..975258b 100644
--- a/policies/kv/service/openldap/ldap_admin_password/read.yaml
+++ b/policies/kv/service/openldap/ldap_admin_password/read.yaml
@@ -8,3 +8,5 @@ rules:
 auth:
   k8s/au/syd1:
     - identity
+  approle:
+    - terraform_ldap