From 74beeaf0e86933ab4f2674a748089616832c0a23 Mon Sep 17 00:00:00 2001
From: classabbyamp <void@placeviolette.net>
Date: Thu, 4 Jul 2024 00:17:23 -0400
Subject: [PATCH] terraform/hashistack/policy_popcorn: let popcorn-report
 access vars from popcorn

---
 terraform/hashistack/policy_popcorn.tf | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 terraform/hashistack/policy_popcorn.tf

diff --git a/terraform/hashistack/policy_popcorn.tf b/terraform/hashistack/policy_popcorn.tf
new file mode 100644
index 00000000..c69eda4a
--- /dev/null
+++ b/terraform/hashistack/policy_popcorn.tf
@@ -0,0 +1,19 @@
+resource "nomad_acl_policy" "popcorn_admin" {
+  name = "popcorn-admin"
+  description = "Manage popcorn keys in nomad variables"
+
+  job_acl {
+    namespace = "apps"
+    job_id = "popcorn-report"
+  }
+
+  rules_hcl = <<EOT
+namespace "apps" {
+  variables {
+    path "nomad/jobs/popcorn" {
+      capabilities = ["read"]
+    }
+  }
+}
+EOT
+}