wrong path on vault admin policy for policies management
in the admin vault policy the following path is defined to managed the policies:
# Create and manage system policies broadly across vault
path "sys/policies/*" {
capabilities = ["create", "read", "update", "delete", "list", "sudo"]
}
It is not the correct path. Indeed try to create a policy.redhatcop.redhat.io will has the following result:
message: "Error making API request.\n\nURL: GET https://vault.vault.svc.cluster.local:8200/v1/sys/policy/testpolicy\nCode:
403. Errors:\n\n* 1 error occurred:\n\t* permission denied\n\n"
Correcting the admin policy with path "sys/policy/*" { solve that issue