2026-08-06 23:17:35 +10:00
1 changed files with 5 additions and 0 deletions
@@ -5,6 +5,11 @@ rules:
  - path: "kv/data/service/terraform/infra"
    capabilities:
      - read
+  # vault_kv_secret_v2 (terraform-infra providers.tf data source) reads the kv-v2
+  # metadata path on every plan/apply; a 403 here fails the plan.
+  - path: "kv/metadata/service/terraform/infra"
+    capabilities:
+      - read

 auth:
  approle: