Hi
Following this example and then trying to harden it for non root token usage:
I found that the role I had created needed not only access to the path:
path “mariadb/data/*” { capabilities = [“read”] }
but also:
path “sys/mounts/mariadb/*” { capabilities = [“read”] }
or upon restarting mariadb one would get a:
2025-02-12 14:55:36 0 [ERROR] mariadbd: hashicorp: Unable to get storage options for “https://blah.foo:8200/v1/sys/mounts/mariadb/tune”
is that normal behaviour?
I can’t seem to find it documented anywhere.