policies: grant terraform-git read on the gitea config KV metadata path

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
2026-07-27 22:07:16 +10:00
parent 2c27395613
commit b33053339c
1 changed files with 5 additions and 0 deletions
@@ -12,6 +12,11 @@ rules:
      - create
      - read
      - update
  # vault_kv_secret_v2 also reads the kv-v2 metadata path on every plan/apply
  # (403 here broke the terraform-git main apply, pipeline 107).
  - path: "kv/metadata/service/vault/au/syd1/secret_backend/gitea/config"
    capabilities:
      - read
 auth:
  approle: