29 lines
755 B
HCL
29 lines
755 B
HCL
|
pid_file = "/tmp/pidfile"
|
||
|
|
|
||
|
|
vault {
|
||
|
|
address = "https://10.6.2.1:8200"
|
||
|
|
tls_skip_verify = true
|
||
|
|
retry {
|
||
|
|
num_retries = 5
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
auto_auth {
|
||
|
|
method "approle" {
|
||
|
|
mount_path = "auth/approle"
|
||
|
|
config = {
|
||
|
|
role_id_file_path = "/vault-auth/role_id"
|
||
|
|
secret_id_file_path = "/vault-auth/wrapped_secret_id"
|
||
|
|
secret_id_response_wrapping_path = "auth/approle/role/triage_agent/secret-id"
|
||
|
|
remove_secret_id_file_after_reading = false
|
||
|
|
}
|
||
|
|
}
|
||
|
|
# sink не нужен, если приложению не требуется сам токен Vault
|
||
|
|
}
|
||
|
|
|
||
|
|
template {
|
||
|
|
source = "/vault-template/template.ctmpl"
|
||
|
|
destination = "/vault-secrets/.env"
|
||
|
|
error_on_missing_key = true
|
||
|
|
perms = "0644"
|
||
|
|
}
|