ArgoCD vault plugin - unable to read secrets from harshicorp Vault

[RanjithkumarRD]

Hi,
I'm unable to create an application in ArgoCD UI which needs to read secrets from harshicorp vault location, getting below error. Need your assistance to fix this issue.

• As the error says permission denied, I checked the vault approle token's permissions which looks to be good. But still unable to read the secrets.

Error message:-
Unable to create application: application spec for xg-automation is invalid: InvalidSpecError: Unable to generate manifests in xg-automation: rpc error: code = Unknown desc = Manifest generation error (cached): plugin sidecar failed. error generating manifests in cmp: rpc error: code = Unknown desc = error generating manifests: sh -c "kustomize build . | argocd-vault-plugin generate -" failed exit status 1: Error: Error making API request. URL: GET https://or.vault.com/v1/kv2/data/aws-cloudservices/projects/argo/prod/automation Code: 403. Errors: * permission denied Usage: argocd-vault-plugin generate [flags] Flags: -c, --config-path string path to a file containing Vault configuration (YAML, JSON, envfile) to use -h, --help help for generate -s, --secret-name string name of a Kubernetes Secret in the argocd namespace containing Vault configuration data in the argocd namespace of your ArgoCD host (Only available when used in ArgoCD). The namespace can be overridden by using the format : --verbose-sensitive-output enable verbose mode for detailed info to help with debugging. Includes sensitive data (credentials), logged to stderr