ctctl/vault/policies/nomad-server-tls.hcl

# Obtain server cert for Nomad agent
path "pki/nomad/issue/nomad-server" {
  capabilities = ["update"]
}

# Obtain client cert for Consul
path "pki/consul/issue/nomad-client" {
  capabilities = ["update"]
}