# RPF-WP-0045: ESO delivery for ClusterSecretStore openbao-email-connect via
# Kubernetes auth role email-connect-transactional-eso
# (SA email-connect/email-connect-eso). One exact KV data read.

path "platform/data/workloads/email-connect/transactional" {
  capabilities = ["read"]
}

path "auth/token/lookup-self" {
  capabilities = ["read"]
}

path "auth/token/revoke-self" {
  capabilities = ["update"]
}