nomad
/
acme-to-vault
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use job_name in consul conf and vault policy

This commit is contained in:
Daniel Berteaud 2023-09-03 23:42:14 +02:00
parent 0f1906c436
commit 0a3b3d4bfd
3 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
consul/config/service-defaults/acme-to-vault.hcl
View File

@ -1,3 +1,3 @@
Kind = "service-defaults"
Name = "acme-to-vault[[ .env.suffix ]]"
Name = "[[ .acme.job_name ]][[ .env.suffix ]]"
Protocol = "http"

2
consul/config/service-intentions/acme-to-vault.hcl
View File

@ -1,5 +1,5 @@
Kind = "service-intentions"
Name = "acme-to-vault[[ .env.suffix ]]"
Name = "[[ .acme.job_name ]][[ .env.suffix ]]"
Sources = [
{
Name = "[[ .traefik.instance ]]"

4
vault/policies/acme-to-vault.hcl
View File

@ -5,9 +5,9 @@ path "[[ .vault.prefix ]]kv/metadata/service/traefik/certs" {
capabilities = ["list","read"]
}
path "[[ .vault.prefix ]]kv/data/service/acme-to-vault/account/*" {
path "[[ .vault.prefix ]]kv/data/service/[[ .acme.job_name ]]/account/*" {
capabilities = ["read","create","update"]
}
path "[[ .vault.prefix ]]kv/metadata/service/acme-to-vault/account/*" {
path "[[ .vault.prefix ]]kv/metadata/service/[[ .acme.job_name ]]/account/*" {
capabilities = ["list","read"]
}