From 353fe6bbb921e08ec36647abdc6290d0a71a1cff Mon Sep 17 00:00:00 2001 From: hc-github-team-nomad-core <82989552+hc-github-team-nomad-core@users.noreply.github.com> Date: Fri, 10 May 2024 16:47:20 -0400 Subject: [PATCH] Backport of docs: note that plugin policy is required in the UI for CSI volumes into release/1.7.x (#20560) Co-authored-by: Tim Gross --- website/content/docs/other-specifications/acl-policy.mdx | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/website/content/docs/other-specifications/acl-policy.mdx b/website/content/docs/other-specifications/acl-policy.mdx index 749fec0034c..8e443d427d8 100644 --- a/website/content/docs/other-specifications/acl-policy.mdx +++ b/website/content/docs/other-specifications/acl-policy.mdx @@ -461,6 +461,14 @@ agent { } ``` +Additionally, ACL policies for users who can read jobs that mount CSI volumes +should include the following rules. + +```hcl +plugin { + policy = "read" +} +``` [Secure Nomad with Access Control]: /nomad/tutorials/access-control [hcl]: https://github.com/hashicorp/hcl