Ben Vincent
8df927de18
- move policy rules to hiera array[hash] - add node_token to agent as the default token
23 lines
552 B
YAML
23 lines
552 B
YAML
---
|
|
profiles::vault::server::primary_datacenter: 'au-syd1'
|
|
consul::services:
|
|
vault:
|
|
service_name: 'vault'
|
|
tags:
|
|
- 'https'
|
|
- 'secure'
|
|
address: "%{facts.networking.ip}"
|
|
port: 443
|
|
checks:
|
|
- id: 'vault_https_check'
|
|
name: 'Vault HTTPS Check'
|
|
http: "https://%{facts.networking.fqdn}:443/v1/sys/health"
|
|
method: 'GET'
|
|
tls_skip_verify: true
|
|
interval: '10s'
|
|
timeout: '1s'
|
|
profiles::consul::client::node_rules:
|
|
- resource: service
|
|
segment: vault
|
|
disposition: write
|