chore: add default_user_password credentials policy

- fix the comment for ldap_admin_password - add policy to read default_user_password
2026-02-15 13:43:02 +11:00 · 2026-02-15 13:43:02 +11:00 · c825962490
commit c825962490
parent 51bc3fffc0
2 changed files with 11 additions and 1 deletions
--- a/policies/kv/service/openldap/default_user_password/read.yaml
+++ b/policies/kv/service/openldap/default_user_password/read.yaml
@ -0,0 +1,10 @@
+# Allow reading openldap default-user credentials
+---
+rules:
+  - path: "kv/data/service/openldap/default_user_password"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - terraform_ldap
--- a/policies/kv/service/openldap/ldap_admin_password/read.yaml
+++ b/policies/kv/service/openldap/ldap_admin_password/read.yaml
@ -1,4 +1,4 @@
-# Allow reading Radarr configuration
+# Allow reading openldap admin credentials
 ---
 rules:
  - path: "kv/data/service/openldap/ldap_admin_password"