hashicorp / nomad

Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
https://www.nomadproject.io/
Other
14.76k stars 1.94k forks source link

Multiple workloads with same policy #23660

Open jorgemarey opened 1 month ago

jorgemarey commented 1 month ago

This issue is related to #23614.

Right now users can set the job, group and task on the policy when they want an allocation to get custom permissions on the nomad API. This is OK for most cases, but when you need several jobs to have the same permissions (same policy), we're forced to create another policy with the same rules but another name to be able to set the job, group...

I think there should be a separate table with a mapping of policy -> workload for nomad policies (or at least have a list of mappings in the policy). Maybe there could be an API endpoint to add WI to ACL policies.

jrasell commented 1 month ago

Hi @jorgemarey and thanks for raising this issue. I'll mark it for roadmapping on our backlog.