Ben Vincent
7c0bf4a398
- change vault to use vault ephemeral certificates - remove nginx frontend to vault
23 lines
554 B
YAML
23 lines
554 B
YAML
---
|
|
profiles::vault::server::primary_datacenter: 'au-syd1'
|
|
consul::services:
|
|
vault:
|
|
service_name: 'vault'
|
|
tags:
|
|
- 'https'
|
|
- 'secure'
|
|
address: "%{facts.networking.ip}"
|
|
port: 8200
|
|
checks:
|
|
- id: 'vault_https_check'
|
|
name: 'Vault HTTPS Check'
|
|
http: "https://%{facts.networking.fqdn}:8200/v1/sys/health"
|
|
method: 'GET'
|
|
tls_skip_verify: true
|
|
interval: '10s'
|
|
timeout: '1s'
|
|
profiles::consul::client::node_rules:
|
|
- resource: service
|
|
segment: vault
|
|
disposition: write
|