Add TODO for using nomad api socket

core/metrics/prometheus.nomad

@@ -70,6 +70,8 @@ scrape_configs:
       format:
         - "prometheus"
     nomad_sd_configs:
+        # TODO: Use NOMAD_SECRETS_DIR/api.sock and workload idenity when
+        # workload acls can be set using terraform
       - server: "http://{{env "attr.unique.network.ip-address"}}:4646"
     relabel_configs:
       - source_labels: [__meta_nomad_service]

services/main.tf

@@ -148,6 +148,8 @@ module "diun" {
     DIUN_PROVIDERS_NOMAD_WATCHBYDEFAULT = true
 
     # Nomad API
+    # TODO: Use socket in $NOMAD_SECRETS_DIR/api.sock when we can assign workload ACLs with Terraform to
+    # allow read access. Will need to update template to allow passing token by env
     NOMAD_ADDR           = "http://$${attr.unique.network.ip-address}:4646/"
     DIUN_PROVIDERS_NOMAD = true
   }