ctctl/vault/policies/nomad-client-tls.hcl

# Obtain client cert for Nomad
path "pki/nomad/issue/nomad-client" {
  capabilities = ["update"]
}
# Obtain client cert for Consul
path "pki/consul/issue/nomad-client" {
  capabilities = ["update"]
}