terraform/hashistack/policy_popcorn: let popcorn-report access vars f…

…rom popcorn

terraform/hashistack/policy_popcorn.tf

@@ -0,0 +1,19 @@
+resource "nomad_acl_policy" "popcorn_admin" {
+  name = "popcorn-admin"
+  description = "Manage popcorn keys in nomad variables"
+
+  job_acl {
+    namespace = "apps"
+    job_id = "popcorn-report"
+  }
+
+  rules_hcl = <<EOT
+namespace "apps" {
+  variables {
+    path "nomad/jobs/popcorn" {
+      capabilities = ["read"]
+    }
+  }
+}
+EOT
+}