SentinelPolicyArgs

import * as pulumi from "@pulumi/pulumi";
import * as nomad from "@pulumi/nomad";
const exec_only = new nomad.SentinelPolicy("exec-only", {
    name: "exec-only",
    description: "Only allow jobs that are based on an exec driver.",
    policy: `main = rule { all_drivers_exec }
# all_drivers_exec checks that all the drivers in use are exec
all_drivers_exec = rule {
    all job.task_groups as tg {
        all tg.tasks as task {
            task.driver is "exec"
        }
    }
}
`,
    scope: "submit-job",
    enforcementLevel: "soft-mandatory",
});

import pulumi
import pulumi_nomad as nomad
exec_only = nomad.SentinelPolicy("exec-only",
    name="exec-only",
    description="Only allow jobs that are based on an exec driver.",
    policy="""main = rule { all_drivers_exec }
# all_drivers_exec checks that all the drivers in use are exec
all_drivers_exec = rule {
    all job.task_groups as tg {
        all tg.tasks as task {
            task.driver is "exec"
        }
    }
}
""",
    scope="submit-job",
    enforcement_level="soft-mandatory")

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Nomad = Pulumi.Nomad;
return await Deployment.RunAsync(() =>
{
    var exec_only = new Nomad.SentinelPolicy("exec-only", new()
    {
        Name = "exec-only",
        Description = "Only allow jobs that are based on an exec driver.",
        Policy = @"main = rule { all_drivers_exec }
# all_drivers_exec checks that all the drivers in use are exec
all_drivers_exec = rule {
    all job.task_groups as tg {
        all tg.tasks as task {
            task.driver is ""exec""
        }
    }
}
",
        Scope = "submit-job",
        EnforcementLevel = "soft-mandatory",
    });
});

package main
import (
	"github.com/pulumi/pulumi-nomad/sdk/v2/go/nomad"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := nomad.NewSentinelPolicy(ctx, "exec-only", &nomad.SentinelPolicyArgs{
			Name:        pulumi.String("exec-only"),
			Description: pulumi.String("Only allow jobs that are based on an exec driver."),
			Policy: pulumi.String(`main = rule { all_drivers_exec }
# all_drivers_exec checks that all the drivers in use are exec
all_drivers_exec = rule {
    all job.task_groups as tg {
        all tg.tasks as task {
            task.driver is "exec"
        }
    }
}
`),
			Scope:            pulumi.String("submit-job"),
			EnforcementLevel: pulumi.String("soft-mandatory"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nomad.SentinelPolicy;
import com.pulumi.nomad.SentinelPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var exec_only = new SentinelPolicy("exec-only", SentinelPolicyArgs.builder()
            .name("exec-only")
            .description("Only allow jobs that are based on an exec driver.")
            .policy("""
main = rule { all_drivers_exec }
# all_drivers_exec checks that all the drivers in use are exec
all_drivers_exec = rule {
    all job.task_groups as tg {
        all tg.tasks as task {
            task.driver is "exec"
        }
    }
}
            """)
            .scope("submit-job")
            .enforcementLevel("soft-mandatory")
            .build());
    }
}

resources:
  exec-only:
    type: nomad:SentinelPolicy
    properties:
      name: exec-only
      description: Only allow jobs that are based on an exec driver.
      policy: |
        main = rule { all_drivers_exec }
        # all_drivers_exec checks that all the drivers in use are exec
        all_drivers_exec = rule {
            all job.task_groups as tg {
                all tg.tasks as task {
                    task.driver is "exec"
                }
            }
        }
      scope: submit-job
      enforcementLevel: soft-mandatory