github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update nomad policies to match https://developer.hashicorp.com/nomad/docs/integrations/consul/acl#nomad-agents

pull/21872/head
Tristan Morgan 2024-10-24 10:31:24 +11:00
parent f82f5207a1
commit e495978eeb
No known key found for this signature in database
6 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
agent/structs/acltemplatedpolicy/policies/ce/nomad-client.hcl
View File

@ -2,7 +2,7 @@ agent_prefix "" {
policy = "read"
}
node_prefix "" {
policy = "read"
policy = "write"
}
service_prefix "" {
policy = "write"

6
agent/structs/acltemplatedpolicy/policies/ce/nomad-server.hcl
View File

@ -1,10 +1,12 @@
acl = "write"
acl = "write"
mesh = "write"
agent_prefix "" {
policy = "read"
}
node_prefix "" {
policy = "read"
policy = "write"
}
service_prefix "" {
policy = "write"

2
command/acl/templatedpolicy/testdata/FormatTemplatedPolicy/ce/nomad-client-templated-policy.json.golden vendored
View File

@ -1,6 +1,6 @@
{
"TemplateName": "builtin/nomad-client",
"Schema": "",
"Template": "agent_prefix \"\" {\n policy = \"read\"\n}\nnode_prefix \"\" {\n policy = \"read\"\n}\nservice_prefix \"\" {\n policy = \"write\"\n}\nkey_prefix \"\" {\n policy = \"read\"\n}",
"Template": "agent_prefix \"\" {\n policy = \"read\"\n}\nnode_prefix \"\" {\n policy = \"write\"\n}\nservice_prefix \"\" {\n policy = \"write\"\n}\nkey_prefix \"\" {\n policy = \"read\"\n}",
"Description": "Gives the token or role permissions required for integration with a nomad client."
}

2
command/acl/templatedpolicy/testdata/FormatTemplatedPolicy/ce/nomad-client-templated-policy.pretty-meta.golden vendored
View File

@ -8,7 +8,7 @@ agent_prefix "" {
policy = "read"
}
node_prefix "" {
policy = "read"
policy = "write"
}
service_prefix "" {
policy = "write"

2
command/acl/templatedpolicy/testdata/FormatTemplatedPolicy/ce/nomad-server-templated-policy.json.golden vendored
View File

@ -1,6 +1,6 @@
{
"TemplateName": "builtin/nomad-server",
"Schema": "",
"Template": "\nacl = \"write\"\nagent_prefix \"\" {\n policy = \"read\"\n}\nnode_prefix \"\" {\n policy = \"read\"\n}\nservice_prefix \"\" {\n policy = \"write\"\n}",
"Template": "\nacl = \"write\"\nmesh = \"write\"\n\nagent_prefix \"\" {\n policy = \"read\"\n}\nnode_prefix \"\" {\n policy = \"write\"\n}\nservice_prefix \"\" {\n policy = \"write\"\n}",
"Description": "Gives the token or role permissions required for integration with a nomad server."
}

6
command/acl/templatedpolicy/testdata/FormatTemplatedPolicy/ce/nomad-server-templated-policy.pretty-meta.golden vendored
View File

@ -5,12 +5,14 @@ Example usage:
consul acl token create -templated-policy builtin/nomad-server
Raw Template:
acl = "write"
acl = "write"
mesh = "write"
agent_prefix "" {
policy = "read"
}
node_prefix "" {
policy = "read"
policy = "write"
}
service_prefix "" {
policy = "write"