resource "vault_policy" "camputules-policy" {
  name = "camptules-policy"
  policy = <<EOF
path "kv/data/camptules" {
  capabilities = ["read"]
}
EOF
}

resource "nomad_job" "camptules" {
  jobspec = file("${path.module}/job/camptules.hcl")

  hcl2 {
    enabled = true
    vars = {
      flake_ref = "${var.flake_host}?rev=${var.flake_rev}&ref=${var.flake_ref}"
      flake_sha = var.flake_sha
    }
  }
}