github.com/anth0d/nomad@v0.0.0-20221214183521-ae3a0a2cad06/e2e/consulacls/nomad-server-policy.hcl (about)

     1  // The operator=write permission is required for creating config entries for
     2  // connect ingress gateways. operator ACLs are not namespaced, though the
     3  // config entries they can generate are.
     4  operator = "write"
     5  
     6  namespace_prefix "" {
     7    // The acl=write permission is required for generating Consul Service Identity
     8    // tokens for consul connect services. Those services could be configured for
     9    // any Consul namespace the job-submitter has access to.
    10    acl = "write"
    11  }
    12  
    13  service_prefix "" {
    14    policy = "write"
    15  }
    16  
    17  agent_prefix "" {
    18    policy = "read"
    19  }
    20  
    21  node_prefix "" {
    22    policy = "read"
    23  }