infra/vault/policies/ansible.hcl

path "kv/*" {
  capabilities = ["list", "read"]
}

path "pki_int/issue/masked-dot-name" {
  capabilities = [ "create", "read", "list", "update" ]
}