Last active
February 10, 2026 00:33
-
-
Save schmichael/cf0bea2c64f4014f766412637b89f672 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| acl { | |
| enabled = true | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| operator { | |
| policy = "write" | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # See https://developer.hashicorp.com/nomad/docs/secure/acl/policies for ACL Policy details | |
| # Example policy structure: | |
| namespace "default" { | |
| policy = "deny" | |
| capabilities = [] | |
| } | |
| namespace "example-ns" { | |
| policy = "deny" | |
| capabilities = ["list-jobs", "read-job"] | |
| variables { | |
| # list access to variables in all paths, full access in nested/variables/* | |
| path "*" { | |
| capabilities = ["list"] | |
| } | |
| path "nested/variables/*" { | |
| capabilities = ["write", "read", "destroy", "list"] | |
| } | |
| } | |
| } | |
| host_volume "example-volume" { | |
| policy = "deny" | |
| } | |
| agent { | |
| policy = "deny" | |
| } | |
| node { | |
| policy = "deny" | |
| } | |
| quota { | |
| policy = "deny" | |
| } | |
| operator { | |
| policy = "deny" | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment