# Allow the vault deployer to import (register/deregister) plugin in the catalog
---
rules:
  - path: "sys/plugins/catalog/*"
    capabilities:
      - create
      - read
      - update
      - delete
      - sudo

auth:
  approle:
    - tf_vault
  k8s/au/syd1:
    - woodpecker_terraform_vault