infra/vault/policies/cert-manager.hcl

path "kv/data/acme" {
  capabilities = ["read"]
}
path "kv/data/namecheap" {
  capabilities = ["read"]
}
path "kv/data/aws" {
  capabilities = ["read"]
}