Update policies to scope agent access.

pull/21872/head
Tristan Morgan 2 weeks ago
parent c5dffcceed
commit 0eb8dcabac
No known key found for this signature in database

@ -1,4 +1,4 @@
agent_prefix "" {
agent "{{.Name}}" {
policy = "read"
}
node "{{.Name}}" {
@ -9,4 +9,4 @@ service_prefix "" {
}
key_prefix "" {
policy = "read"
}
}

@ -1,8 +1,7 @@
acl = "write"
mesh = "write"
agent_prefix "" {
agent "{{.Name}}" {
policy = "read"
}
node "{{.Name}}" {
@ -10,4 +9,4 @@ node "{{.Name}}" {
}
service_prefix "" {
policy = "write"
}
}

@ -1,6 +1,6 @@
{
"TemplateName": "builtin/nomad-client",
"Schema": "",
"Template": "agent_prefix \"\" {\n policy = \"read\"\n}\nnode \"{{.Name}}\" {\n policy = \"write\"\n}\nservice_prefix \"\" {\n policy = \"write\"\n}\nkey_prefix \"\" {\n policy = \"read\"\n}",
"Template": "agent \"{{.Name}}\" {\n policy = \"read\"\n}\nnode \"{{.Name}}\" {\n policy = \"write\"\n}\nservice_prefix \"\" {\n policy = \"write\"\n}\nkey_prefix \"\" {\n policy = \"read\"\n}\n",
"Description": "Gives the token or role permissions required for integration with a nomad client."
}

@ -5,7 +5,7 @@ Input variables:
Example usage:
consul acl token create -templated-policy builtin/nomad-client -var name:node-1
Raw Template:
agent_prefix "" {
agent "{{.Name}}" {
policy = "read"
}
node "{{.Name}}" {
@ -17,3 +17,4 @@ service_prefix "" {
key_prefix "" {
policy = "read"
}

@ -1,6 +1,6 @@
{
"TemplateName": "builtin/nomad-server",
"Schema": "",
"Template": "\nacl = \"write\"\nmesh = \"write\"\n\nagent_prefix \"\" {\n policy = \"read\"\n}\nnode \"{{.Name}}\" {\n policy = \"write\"\n}\nservice_prefix \"\" {\n policy = \"write\"\n}",
"Template": "acl = \"write\"\nmesh = \"write\"\n\nagent \"{{.Name}}\" {\n policy = \"read\"\n}\nnode \"{{.Name}}\" {\n policy = \"write\"\n}\nservice_prefix \"\" {\n policy = \"write\"\n}\n",
"Description": "Gives the token or role permissions required for integration with a nomad server."
}

@ -5,11 +5,10 @@ Input variables:
Example usage:
consul acl token create -templated-policy builtin/nomad-server -var name:node-1
Raw Template:
acl = "write"
mesh = "write"
agent_prefix "" {
agent "{{.Name}}" {
policy = "read"
}
node "{{.Name}}" {
@ -18,3 +17,4 @@ node "{{.Name}}" {
service_prefix "" {
policy = "write"
}

Loading…
Cancel
Save