# Allow configuration of Kubernetes authentication backend
path "auth/kubernetes/config" {
  capabilities = ["create", "update", "read", "delete"]
}

# Allow management of Kubernetes auth roles
path "auth/kubernetes/role/*" {
  capabilities = ["create", "update", "read", "delete", "list"]
}

# Allow listing auth/kubernetes/role
path "auth/kubernetes/role" {
  capabilities = ["list"]
}