Update to 2022-08-11 12:00

This commit is contained in:
Daniel Berteaud 2022-08-11 12:00:16 +02:00
parent 9d4a3e4947
commit 2594e58276
2 changed files with 11 additions and 0 deletions

View File

@ -77,8 +77,14 @@ consul_base_conf:
prometheus_retention_time: 1h
connect:
# Enable consul service mesh on servers
enabled: "{{ (inventory_hostname in consul_servers | map('regex_replace', ':\\d+$', '')) | ternary(True, False) }}"
acl:
enabled: False
# The default_policy is also used for intentions in the service mesh
default_policy: deny
consul_extra_conf: {}
consul_host_conf: {}
consul_conf: "{{ consul_base_conf | combine(consul_extra_conf, recursive=True) | combine(consul_host_conf, recursive=True) }}"

View File

@ -71,3 +71,8 @@ connect {
enabled = true
}
{% endif %}
acl {
enabled = {{ consul_conf.acl.enabled | ternary('true', 'false') }}
default_policy = "{{ consul_conf.acl.default_policy }}"
}