sentinel Block in Agent Configuration

This page provides reference information for configuring the Sentinel policy engine in the sentinel block of a Nomad agent configuration. Configure the path to the plugin that Nomad uses to import Sentinel policies and specify arguments to pass to that plugin on startup.

sentinel {
    import "custom-plugin" {
        path = "/usr/bin/sentinel-custom-plugin"
        args = ["-verbose", "foo"]
    }
}

sentinel Parameters

• import (Import: nil) - Specifies a plugin that should be made available for importing by Sentinel policies. The name of the import matches the name that can be imported.

import Parameters

• path (string: "") - Specifies the path to the import plugin. Must be executable by Nomad.

• args (array<string>: []) - Specifies arguments to pass to the plugin when starting it.

Resources

Refer to these resources for details on using Sentinel policies with Nomad:

• Governance and policy on Nomad
• Sentinel policies
• Sentinel policy reference