monitoring/vault/policies/alertmanager.hcl

[[- $c := merge .monitoring.alertmanager .monitoring . ]]
path "[[ $c.vault.pki.path ]]/issue/alertmanager" {
  capabilities = ["update"]
}

path "[[ .vault.root ]]kv/data/service/[[ .instance ]]/alertmanager" {
  capabilities = ["read"]
}