# Allow reading environment variables for artifactapi --- rules: - path: "kv/data/service/artifactapi/environment" capabilities: - read auth: k8s/au/syd1: - artifactapi