2026-07-27 23:21:44 +10:00
1 changed files with 5 additions and 0 deletions
@@ -12,6 +12,11 @@ rules:
      - create
      - read
      - update
+  # vault_kv_secret_v2 also reads the kv-v2 metadata path on every plan/apply
+  # (403 here broke the terraform-git main apply, pipeline 107).
+  - path: "kv/metadata/service/vault/au/syd1/secret_backend/gitea/config"
+    capabilities:
+      - read

 auth:
  approle: