Deploy `/etc/nomad.d/policies/anonymous.hcl`.

cookbooks/nomad/files/etc/nomad.d/policies/anonymous.hcl

@@ -0,0 +1,24 @@
+namespace "*" {
+  policy       = "write"
+  capabilities = ["alloc-node-exec"]
+}
+
+agent {
+  policy = "write"
+}
+
+operator {
+  policy = "write"
+}
+
+quota {
+  policy = "write"
+}
+
+node {
+  policy = "write"
+}
+
+host_volume "*" {
+  policy = "write"
+}

cookbooks/nomad/setup.rb

@@ -24,6 +24,12 @@ if node['nomad']['manager']
   end
 
   directory '/etc/nomad.d/policies' do
+    owner 'nomad'
+    group 'nomad'
+    mode '755'
+  end
+
+  remote_file '/etc/nomad.d/policies/anonymous.hcl' do
     owner 'nomad'
     group 'nomad'
     mode '644'