fix: [nomad-step-2] S2-fix-G — strip trailing /* from all vault policy paths (systemic 403) (#951 )

2026-04-17 08:57:39 +00:00
1 changed files with 2 additions and 2 deletions
--- a/vault/policies/dispatcher.hcl
+++ b/vault/policies/dispatcher.hcl
@ -12,11 +12,11 @@
 # narrow runner-<NAME> policies, NOT this one. This policy stays bound
 # to the long-running dispatcher only.
-path "kv/data/disinto/runner/*" {
+path "kv/data/disinto/runner" {
  capabilities = ["read"]
 }
-path "kv/metadata/disinto/runner/*" {
+path "kv/metadata/disinto/runner" {
  capabilities = ["list", "read"]
 }