feat: generate consul policy/tokens

- generate policy/token to add nodes - generate policy/token for all nodes - add base::root profile to manage aspects of the root user
2024-04-27 01:16:05 +10:00
parent c0642bbcf1
commit f536d19034
9 changed files with 112 additions and 3 deletions
@@ -0,0 +1,13 @@
+# profiles::consul::tokens
+class profiles::consul::tokens (
+  String $root_api_token = lookup('profiles::consul::server::acl_tokens_initial_management'),
+){
+
+  consul_token { 'node_editor':
+    accessor_id      => lookup('profiles::consul::token::node_editor::accessor_id'),
+    policies_by_name => ['node_editor'],
+    acl_api_token    => $root_api_token,
+    secret_id        => lookup('profiles::consul::token::node_editor::secret_id'),
+    hostname         => $facts['networking']['ip'],
+  }
+}