Nomad ACL Configuration: Defining Anonymous Token Permissions to Prevent Public Access
When ACLs are enabled in a Nomad cluster, the default deny policy protects resources, but the anonymous token can still be assigned a policy that grants certain capabilities. The goal is to ensure that the anonymous token does not inadvertently allow public read or write access to sensitive endpoints such as job submission or node metadata, especially when t