resource "vault_policy" "k8s_default_sa" { name = "k8s-default-sa" policy = file("bao-policies/k8s-default-sa.hcl") }