ctctl/vault/policies/ct-worker.hcl

path "auth/token/create/nomad-client" {
  capabilities = ["update"]
}

path "auth/token/roles/nomad-client" {
  capabilities = ["read"]
}

path "consul/creds/nomad-client" {
  capabilities = ["read"]
}