Add support for initial_management token like in Consul

[apollo13]

It would be great if it were possible to preset a token with access-id & secret-id like in consul: https://www.consul.io/docs/agent/options.html#acl_tokens This way nomad could be initialized easier via configuration management tools.

[evandam]

Agreed, having the option to create tokens with predefined values like in Consul would be a big help and keep things more consistent.

[scalp42]

Same here main use case is configuration management so we could have clusters bootstrap ACLs themselves in a much more straightforward way.

[Y-Tian]

+1 we would like to see this feature as well.

[th0m]

+1, would love to get feature parity with Consul for token management.

[notnoop]

Good suggestion! We will mark it as an enhancement we'd consider in the roadmap. Thanks!

[apollo13]

Copying my comment from the PR so it doesn't get lost when the PR is closed:

What do you think about altering the /acl/bootstrap endpoint (or maybe even introduce a new one) to allow the enduser to submit a token pair to it (AccessorID & SecretID) which will be used as the initial management token? This way you can safely store the token pair in a system suitable for your automation (for example an ansible vault) but you would not leak it onto the machines.

[apollo13]

Looks like this would be fixed by #12520

[github-actions]

I'm going to lock this issue because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.