monitoring/vault/policies/monitoring-alertmanager.hcl

[[- $c := merge .monitoring.alertmanager .monitoring . ]]
path "[[ $c.vault.pki.path ]]/issue/[[ .instance ]]-alertmanager" {
  capabilities = ["update"]
}

path "[[ .vault.root ]]kv/service/[[ .instance ]]/alertmanager" {
  capabilities = ["read"]
}