nomad
/
democratic_csi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update rendered example

This commit is contained in:
Daniel Berteaud 2024-03-05 14:45:58 +01:00
parent 33daacaf00
commit c95b1ad72a
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
example/controller.nomad.hcl
View File

@ -77,7 +77,7 @@ httpConnection:
protocol: https
host: truenas.example.org:443
port: 443
apiKey: {{ with secret "/kv/service/democratic-csi" }}{{ .Data.data.truenas_api_key }}{{ end }}
apiKey: {{ with secret "kv/service/democratic-csi" }}{{ .Data.data.truenas_api_key }}{{ end }}
allowInsecure: false
apiVersion: 2
@ -117,7 +117,7 @@ _EOF
# Load vault root CA into the trust store
template {
data = <<-EOF
{{ with secret "/pki/root/cert/ca" }}{{ .Data.certificate }}{{ end }}
{{ with secret "pki/root/cert/ca" }}{{ .Data.certificate }}{{ end }}
EOF
destination = "local/ca.crt"
}
@ -209,7 +209,7 @@ httpConnection:
protocol: https
host: truenas.example.org:443
port: 443
apiKey: {{ with secret "/kv/service/democratic-csi" }}{{ .Data.data.truenas_api_key }}{{ end }}
apiKey: {{ with secret "kv/service/democratic-csi" }}{{ .Data.data.truenas_api_key }}{{ end }}
allowInsecure: false
apiVersion: 2
@ -240,7 +240,7 @@ _EOF
# Load vault root CA into the trust store
template {
data = <<-EOF
{{ with secret "/pki/root/cert/ca" }}{{ .Data.certificate }}{{ end }}
{{ with secret "pki/root/cert/ca" }}{{ .Data.certificate }}{{ end }}
EOF
destination = "local/ca.crt"
}

6
example/vault/policies/democratic-csi.hcl
View File

@ -1,12 +1,12 @@
# Access the vault KV (v2) store
path "/kv/data/service/democratic-csi" {
path "kv/data/service/democratic-csi" {
capabilities = ["read"]
}
path "/kv/metadata/service/democratic-csi/*" {
path "kv/metadata/service/democratic-csi/*" {
capabilities = ["read", "list"]
}
path "/kv/data/service/democratic-csi/*" {
path "kv/data/service/democratic-csi/*" {
capabilities = ["read"]
}