From f78b3fc830323643e10709c49232dc24a71829e2 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Sun, 15 Mar 2026 11:41:34 +0100
Subject: [PATCH] oidc vault config change authentik6

---
 vault/configure-oidc.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/vault/configure-oidc.yaml b/vault/configure-oidc.yaml
index 321b616..a84d6e9 100644
--- a/vault/configure-oidc.yaml
+++ b/vault/configure-oidc.yaml
@@ -52,6 +52,11 @@ spec:
             - |
               vault auth enable oidc 2>/dev/null || true
               vault auth tune -listing_visibility=unauth oidc/
+              vault policy write admin - <<'POLICY'
+              path "*" {
+                capabilities = ["create", "read", "update", "delete", "list", "sudo"]
+              }
+              POLICY
               vault write auth/oidc/config \
                 oidc_discovery_url="https://authentik.rubenhensen.nl/application/o/vault/" \
                 oidc_client_id="vault" \
@@ -63,5 +68,5 @@ spec:
                 user_claim="preferred_username" \
                 oidc_scopes="openid,profile,email" \
                 groups_claim="groups" \
-                policies="default"
+                policies="default,admin"
       restartPolicy: OnFailure