terraform-vault/policies/kv/service/media-apps/sonarr/read.yaml

# Allow reading Sonarr configuration
---
rules:
  - path: "kv/data/service/media-apps/sonarr"
    capabilities:
      - read

auth:
  approle:
    - terraform_sonarr
  k8s/au/syd1:
    - media-apps
    - woodpecker_terraform_sonarr