luxolus/open-nomad
2
0
Fork 0
Code Issues 1 Pull requests Packages Releases Wiki Activity
open-nomad/website/source/docs/agent/configuration/acl.html.md
Armon Dadgar a712a83f1b website: Document ACL APIs and configuration
2017-09-04 13:07:44 -07:00

1.7 KiB
Raw Blame History

layout page_title sidebar_current description
docs acl Stanza - Agent Configuration docs-agent-configuration-acl The "acl" stanza configures the Nomad agent to enable ACLs and tune various parameters.

acl Stanza

Placement **acl**

The acl stanza configures the Nomad agent to enable ACLs and tunes various ACL parameters.

acl {
  enabled = true
  token_ttl = "30s"
  policy_ttl = "60s"
}

acl Parameters

  • enabled (bool: false) - Specifies if ACL enforcement is enabled. All other client configuration options depend on this value.

  • token_ttl (string: "30s") - Specifies the maximum time-to-live (TTL) for cached ACL tokens. This does not affect servers, since they do not cache tokens. Setting this value lower reduces how stale a token can be, but increases the request load against servers. If a client cannot reach a server, for example because of an outage, the TTL will be ignored and the cached value used.

  • policy_ttl (string: "30s") - Specifies the maximum time-to-live (TTL) for cached ACL policies. This does not affect servers, since they do not cache policies. Setting this value lower reduces how stale a policy can be, but increases the request load against servers. If a client cannot reach a server, for example because of an outage, the TTL will be ignored and the cached value used.

  • replication_token (string: "") - Specifies the Secret ID of the ACL token to use for replicating policies and tokens. This is used by servers in non-authoritative region to mirror the policies and tokens into the local region.