From ef850d91a4f47e5454485f515961585af5494fc9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torjus=20H=C3=A5kestad?= <torjus@usit.uio.no>
Date: Tue, 17 Feb 2026 00:52:07 +0100
Subject: [PATCH] terraform: grant monitoring02 access to apiary-token secret

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 terraform/vault/approle.tf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/terraform/vault/approle.tf b/terraform/vault/approle.tf
index 6f05de0..8542812 100644
--- a/terraform/vault/approle.tf
+++ b/terraform/vault/approle.tf
@@ -104,10 +104,11 @@ locals {
       ]
     }
 
-    # monitoring02: Grafana test instance
+    # monitoring02: Grafana + VictoriaMetrics
     "monitoring02" = {
       paths = [
         "secret/data/hosts/monitoring02/*",
+        "secret/data/hosts/monitoring01/apiary-token",
         "secret/data/services/grafana/*",
       ]
     }