diff --git a/examples/kms/vault/vault.yaml b/examples/kms/vault/vault.yaml
index d7eb1fcdc..f58dd818a 100644
--- a/examples/kms/vault/vault.yaml
+++ b/examples/kms/vault/vault.yaml
@@ -82,11 +82,11 @@ items:
         # create policy to use keys related to the cluster
         vault policy write "${CLUSTER_IDENTIFIER}" - << EOS
         path "secret/data/ceph-csi/*" {
-          capabilities = ["create", "update", "delete", "read"]
+          capabilities = ["create", "update", "delete", "read", "list"]
         }
 
         path "secret/metadata/ceph-csi/*" {
-          capabilities = ["read", "delete"]
+          capabilities = ["read", "delete", "list"]
         }
         EOS