--- rules: - path: "consul_root/au/syd1/creds/terraform-artifactapi" capabilities: - read auth: approle: - terraform_artifactapi k8s/au/syd1: - woodpecker_terraform_artifactapi