unkin/terraform-vault
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: grant vault deployer access to manage the litellm engine #84

Merged
benvin merged 1 commits from benvin/litellm-deployer-policy into master 2026-07-07 20:10:43 +10:00
Conversation 0 Commits 1 Files Changed 1
+26

1 Commits

Author SHA1 Message Date
unkinben 77662a6f10 fix: grant vault deployer access to manage the litellm engine
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details 
Applying the litellm mount failed with 403 permission denied on
PUT litellm/config: the deployer identity (tf_vault approle /
woodpecker_terraform_vault k8s role) could enable the mount via
sys/mounts/admin but had no policy covering the engine's own data paths.

Add a litellm/admin policy granting create/read/update/delete on
litellm/config and litellm/roles/*, assigned to the same auth roles as the
other secret-engine admin policies.
 2026-07-07 00:25:16 +10:00