2026-09-27 10:35:05 +10:00
1 changed files with 5 additions and 0 deletions
@@ -10,6 +10,11 @@ rules:
  - path: "kv/data/kubernetes/namespace/+/default/oauth-credentials"
    capabilities:
      - read
+  # Second OIDC client in an already-onboarded namespace, so it cannot use the
+  # one-per-namespace oauth-credentials path above.
+  - path: "kv/data/kubernetes/namespace/logging/default/vlogs-oauth-credentials"
+    capabilities:
+      - read

 auth:
  approle: