# Read vault metrics
path "sys/metrics" {
  capabilities = ["read", "list"]
}

# Get a cert for Nomad
path "pki/nomad/issue/monitoring-cluster-exporter" {
  capabilities = ["update"]
}

# Get a cert for Consul
path "pki/consul/issue/monitoring-cluster-exporter" {
  capabilities = ["update"]
}

# Get a consul token
path "consul/creds/monitoring-cluster-exporter" {
  capabilities = ["read"]
}