Deployment

2026-09-25 19:44:48 +03:00
parent 596adfdc09
commit 066bfb3c0b
24 changed files with 472 additions and 151 deletions
@@ -0,0 +1,29 @@
+pid_file = "/tmp/pidfile"
+
+vault {
+  address = "https://10.6.2.1:8200"
+  tls_skip_verify = true
+  retry {
+    num_retries = 5
+  }
+}
+
+auto_auth {
+  method "approle" {
+    mount_path = "auth/approle"
+    config = {
+      role_id_file_path                   = "/vault-auth/role_id"
+      secret_id_file_path                 = "/vault-auth/wrapped_secret_id"
+      secret_id_response_wrapping_path    = "auth/approle/role/triage_agent/secret-id"
+      remove_secret_id_file_after_reading = false
+    }
+  }
+  # sink не нужен, если приложению не требуется сам токен Vault
+}
+
+template {
+  source      = "/vault-template/template.ctmpl"
+  destination = "/vault-secrets/.env"
+  error_on_missing_key = true
+  perms = "0644"
+}