Hello,
In the Vault Policy/Check Token Capabilities tutorial, the third step
$vault token capabilities $ADMIN_TOKEN sys/auth/approle
should show: create, delete, sudo, update.
In your tutorial it lists read too, which is not accurate according to the Policy written above (admin-policy.hcl),
# Create, update, and delete auth methods
path "sys/auth/*"
{
capabilities = ["create", "update", "delete", "sudo"]
}
so it just needs to be updated to avoid confusion.
Thanks,
Zaid