21 lines
754 B
Django/Jinja
21 lines
754 B
Django/Jinja
#!/bin/sh
|
|
|
|
set -eo pipefail
|
|
|
|
VAULT_ADDR={{ vault_agent_vault_address }}
|
|
VAULT_STATUS=$(vault status -format=json)
|
|
|
|
if [ "$(echo ${VAULT_STATUS} | jq .is_self)" != "true" ]; then
|
|
echo "We're not the active vault, exiting"
|
|
elif [ "$(echo ${VAULT_STATUS} | jq .sealed)" != "false" ]; then
|
|
echo "Vault is sealed, exiting"
|
|
elif [ "$(echo ${VAULT_STATUS} | jq .initialized)" != "true" ]; then
|
|
echo "Vault is not initialized yet, exiting"
|
|
else
|
|
echo Updating Vault certificate to access Nomad API
|
|
vault write {{ vault_agent_nomad.nomad_pki.cli.secret_path }}/config/access \
|
|
ca_cert="$(cat {{ nomad_root_dir }}/tls/ca.crt)" \
|
|
client_cert="$(cat {{ nomad_root_dir }}/tls/cli.crt)" \
|
|
client_key="$(cat {{ nomad_root_dir }}/tls/cli.key)"
|
|
fi
|