apiVersion: v1
kind: ConfigMap
metadata:
  name: vault-policy-external-secrets
  namespace: vault
data:
  external-secrets.hcl: |
    path "secret/data/*" {
      capabilities = ["create", "update", "read", "list"]
    }
    path "secret/metadata/*" {
      capabilities = ["create", "update", "read", "list"]
    }