acme-to-vault/example/vault/policies/acme-to-vault.hcl

path "/kv/data/service/+/certs/*" {
  capabilities = ["read","create","update"]
}
path "/kv/metadata/service/+/certs" {
  capabilities = ["list","read"]
}

path "/kv/data/service/acme-to-vault/account/*" {
  capabilities = ["read","create","update"]
}
path "/kv/metadata/service/acme-to-vault/account/*" {
  capabilities = ["list","read"]
}

path "/kv/data/service/acme-to-vault" {
  capabilities = ["read"]
}