squid/vault/policies/squid.hcl

path "[[ .vault.root ]]kv/data/service/[[ .instance ]]" {
  capabilities = ["read"]
}