Configure vault pki for monitoring

This commit is contained in:
Daniel Berteaud 2024-03-18 21:45:18 +01:00
parent f06ba30318
commit c07c7dedfe
2 changed files with 3 additions and 1 deletions

View File

@ -27,7 +27,7 @@ vim: syntax=hcl
template {
data =<<_EOT
{{- with pkiCert "[[ .vault.root ]]pki/monitoring/issue/metrics" (printf "ip_sans=%s" (env "NOMAD_HOST_IP_metrics")) }}
{{- with pkiCert "[[ .prometheus.vault_pki ]]/issue/metrics" (printf "ip_sans=%s" (env "NOMAD_HOST_IP_metrics")) }}
{{ .Cert }}
{{ .Key }}{{ end -}}
_EOT

View File

@ -193,6 +193,8 @@ mail:
prometheus:
# Controls if prometheus metrics should be enabled on all tasks supporting it
enabled: False
# Path of the vault PKI used for monitoring
vault_pki: '[[ .vault.root ]]pki/monitoring'
docker:
# Your repo where locally built images will be pushed