Fix keycloack url

manifests/vault/values.yaml

@@ -44,6 +44,12 @@ server:
             oidc_client_secret="8GWiUqwUZimb4xXHqFNTYCrTkKyc9hrY" \
             default_role="vault-role"
 
+          vault policy write oidc-ui-access - <<EOF
+          path "auth/oidc/role/vault-role" {
+            capabilities = ["read"]
+          }
+          EOF
+
           vault write auth/oidc/role/vault-role \
             bound_audiences="vault" \
             allowed_redirect_uris="https://vault.dvirlabs.com/ui/vault/auth/oidc/oidc/callback" \
@@ -51,8 +57,10 @@ server:
             groups_claim="groups" \
             oidc_scopes="profile email groups" \
             policies="default" \
+            token_policies="oidc-ui-access" \
             ttl="1h"
 
+
       env:
         - name: VAULT_TOKEN
           valueFrom: