mirror of
https://github.com/kemko/nomad.git
synced 2026-01-02 08:25:43 +03:00
15c01e5a49
https://datatracker.ietf.org/doc/html/rfc5952#section-4 * copy NormalizeAddr func from vault * PRs hashicorp/vault#29228 & hashicorp/vault#29517 * normalize bind/advertise addrs * normalize consul/vault addrs
36 lines
897 B
HCL
36 lines
897 B
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
# this unnamed (default) config should merge cleanly onto the basic config
|
|
vault {
|
|
enabled = true
|
|
token = "abracadabra"
|
|
}
|
|
|
|
# these alternate configs should be added as an extra vault configs
|
|
vault {
|
|
name = "alternate"
|
|
address = "[0:0::1F]:9501"
|
|
allow_unauthenticated = true
|
|
task_token_ttl = "5s"
|
|
enabled = true
|
|
token = "xyzzy"
|
|
ca_file = "/path/to/ca/file"
|
|
ca_path = "/path/to/ca"
|
|
cert_file = "/path/to/cert/file"
|
|
key_file = "/path/to/key/file"
|
|
tls_server_name = "barbaz"
|
|
tls_skip_verify = true
|
|
create_from_role = "test_role2"
|
|
}
|
|
|
|
vault {
|
|
name = "other"
|
|
address = "127.0.0.1:9502"
|
|
|
|
default_identity {
|
|
aud = ["vault-other.io"]
|
|
ttl = "4h"
|
|
}
|
|
}
|