hashicorp / nomad

Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
https://www.nomadproject.io/
Other
14.81k stars 1.94k forks source link

documentation: how to create a management token #23724

Closed EugenKon closed 1 month ago

EugenKon commented 1 month ago

Issue

image

https://developer.hashicorp.com/nomad/api-docs/system#force-gc https://developer.hashicorp.com/nomad/api-docs#acls. < This document does not mention 'management'

Expected Result

It should be clear how to create policy with 'management' capabilities.

Actual Result

No description found.

This document also does not describes 'management' ACL: https://developer.hashicorp.com/nomad/tutorials/access-control/access-control-policies#namespace-rules

tgross commented 1 month ago

Management tokens are created the same way all tokens are created, via the nomad acl token create command. You'll use the -type parameter to create a management token instead of a client token.

As I've suggested before @EugenKon, these kinds of questions are better taken to Discuss.

EugenKon commented 1 month ago

Hey, @tgross. This is not a question this is the report of issue with Nomad documentation. Probably, because you are expert in Nomad, you understand what 'management' means. For me it is not clear what ACL Required management means from the documentation links I have provided above. I could not imagine that it refers to a specific token creation. They do not have links to nomad acl token create command and -type option. Looking at ACL I suppose it was https://developer.hashicorp.com/nomad/docs/other-specifications/acl-policy Please reopen the issue.

EugenKon commented 1 month ago

The documentation for GC should refer this page instead: https://developer.hashicorp.com/nomad/tutorials/access-control/access-control-tokens

EugenKon commented 1 month ago

@tgross As a proposition: it is much clear to say "Required management token" instead of "ACL required management". Because ACL is configured via policies, but there is no such thing as management. It relates to token creation. And this should be spelled more explicitly.