monitoring/vault/policies/loki.hcl

[[- $c := merge .monitoring.loki .monitoring . ]]
path "[[ $c.vault.pki.path ]]/issue/loki" {
  capabilities = ["update"]
}

path "[[ $c.vault.root ]]kv/service/[[ .instance ]]/loki" {
  capabilities = ["read"]
}