What causes error "Operation on intention prefix denied due to ACLs'?

Nomad
4

Envoy

If you are using envoy and seeing this error, ensure that the envoy init script has CONSUL_HTTP_TOKEN as an environment variable

/etc/sysconfig/consul

CONSUL_HTTP_SSL=true
CONSUL_HTTP_ADDR=127.0.0.1:8501
CONSUL_CACERT=/etc/ssl/certs/foo.pem
CONSUL_CLIENT_CERT=/etc/foo.pem
CONSUL_CLIENT_KEY=/etc/foo.key
CONSUL_HTTP_TOKEN=12345678

Then inside the systemd unit file, ensure there is this line EnvironmentFile=-/etc/sysconfig/consul

[Unit]
Description=Start envoy proxy
Requires=local-fs.target
After=local-fs.target consul.service

[Service]
Type=simple
ExecStart=/usr/local/bin/consul connect envoy --sidecar-for foobar -admin-bind localhost:19000
EnvironmentFile=-/etc/sysconfig/consul

[Install]
WantedBy=multi-user.target
Wants=consul.service