# Allow reading Prowlarr configuration --- rules: - path: "kv/data/service/media-apps/nzbget" capabilities: - read auth: k8s/au/syd1: - media-apps