terraform-vault/policies/k8s/k8s_pki_roles_admin.hcl

path "k8s/+/roles/*" {
  capabilities = ["create", "update", "read", "delete", "list"]
}