elasticsearch/vault/policies/elasticsearch.hcl

[[- $c := merge .elasticsearch.server .elasticsearch . ]]
[[ template "common/vault.kv_policy" $c ]]

path "[[ $c.vault.pki.path ]]/issue/server" {
  capabilities = ["update"]
}