openbao-helm/test/acceptance/csi-test/vault-policy.hcl

path "secret/data/kv1" {
  capabilities = ["read"]
}