monitoring/vault/policies/grafana.hcl

path "[[ .vault.root ]]database/creds/[[ .monitoring.grafana.vault.database.role ]]" {
  capabilities = ["read"]
}

path "[[ .vault.root ]]kv/data/service/[[ .instance ]]/grafana" {
  capabilities = ["read"]
}