# profiles::consul::policies
class profiles::consul::policies (
  String $root_api_token = lookup('profiles::consul::server::acl_tokens_initial_management'),
) {

  consul_policy { 'node_editor':
    description   => 'Policy to read/write all nodes puppet-generated-policy',
    rules         => [
      {
        'resource'    => 'node',
        'segment'     => '',
        'disposition' => 'write'
      },
      {
        'resource'    => 'node',
        'segment'     => '',
        'disposition' => 'read'
      }
    ],
    acl_api_token => $root_api_token,
    hostname      => $facts['networking']['ip'],
  }
}