diff --git a/examples/kms/vault/vault.yaml b/examples/kms/vault/vault.yaml
index f58dd818a..1da9e4123 100644
--- a/examples/kms/vault/vault.yaml
+++ b/examples/kms/vault/vault.yaml
@@ -88,6 +88,10 @@ items:
         path "secret/metadata/ceph-csi/*" {
           capabilities = ["read", "delete", "list"]
         }
+
+        path "sys/mounts" {
+          capabilities = ["read"]
+        }
         EOS
 
         # create a role