mirror of
https://github.com/kemko/nomad.git
synced 2026-01-04 09:25:46 +03:00
53b083b8c5
* Move commands from docs to its own root-level directory * temporarily use modified dev-portal branch with nomad ia changes * explicitly clone nomad ia exp branch * retrigger build, fixed dev-portal broken build * architecture, concepts and get started individual pages * fix get started section destinations * reference section * update repo comment in website-build.sh to show branch * docs nav file update capitalization * update capitalization to force deploy * remove nomad-vs-kubernetes dir; move content to what is nomad pg * job section * Nomad operations category, deploy section * operations category, govern section * operations - manage * operations/scale; concepts scheduling fix * networking * monitor * secure section * remote auth-methods folder and move up pages to sso; linkcheck * Fix install2deploy redirects * fix architecture redirects * Job section: Add missing section index pages * Add section index pages so breadcrumbs build correctly * concepts/index fix front matter indentation * move task driver plugin config to new deploy section * Finish adding full URL to tutorials links in nav * change SSO to Authentication in nav and file system * Docs NomadIA: Move tutorials into NomadIA branch (#26132) * Move governance and policy from tutorials to docs * Move tutorials content to job-declare section * run jobs section * stateful workloads * advanced job scheduling * deploy section * manage section * monitor section * secure/acl and secure/authorization * fix example that contains an unseal key in real format * remove images from sso-vault * secure/traffic * secure/workload-identities * vault-acl change unseal key and root token in command output sample * remove lines from sample output * fix front matter * move nomad pack tutorials to tools * search/replace /nomad/tutorials links * update acl overview with content from deleted architecture/acl * fix spelling mistake * linkcheck - fix broken links * fix link to Nomad variables tutorial * fix link to Prometheus tutorial * move who uses Nomad to use cases page; move spec/config shortcuts add dividers * Move Consul out of Integrations; move namespaces to govern * move integrations/vault to secure/vault; delete integrations * move ref arch to docs; rename Deploy Nomad back to Install Nomad * address feedback * linkcheck fixes * Fixed raw_exec redirect * add info from /nomad/tutorials/manage-jobs/jobs * update page content with newer tutorial * link updates for architecture sub-folders * Add redirects for removed section index pages. Fix links. * fix broken links from linkcheck * Revert to use dev-portal main branch instead of nomadIA branch * build workaround: add intro-nav-data.json with single entry * fix content-check error * add intro directory to get around Vercel build error * workound for emtpry directory * remove mdx from /intro/ to fix content-check and git snafu * Add intro index.mdx so Vercel build should work --------- Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>
45 lines
1.4 KiB
Plaintext
45 lines
1.4 KiB
Plaintext
---
|
|
layout: docs
|
|
page_title: rsadecrypt - Functions - Configuration Language
|
|
description: The rsadecrypt function decrypts an RSA-encrypted message.
|
|
---
|
|
|
|
# `rsadecrypt` Function
|
|
|
|
<Note title="Deprecated">
|
|
This function is deprecated and may be removed in the future.
|
|
</Note>
|
|
|
|
<Warning>
|
|
While it is possible to use safely, it encourages use of cryptographic
|
|
primitives with <a href="https://en.wikipedia.org/wiki/PKCS_1#Attacks">known
|
|
weaknesses</a>. <a href="/nomad/docs/concepts/variables">Nomad Variables</a>
|
|
and <a href="/nomad/docs/secure/vault">HashiCorp Vault</a> are
|
|
the recommended ways to provide secrets to workloads.
|
|
</Warning>
|
|
|
|
`rsadecrypt` decrypts an RSA-encrypted ciphertext, returning the corresponding
|
|
cleartext.
|
|
|
|
```hcl
|
|
rsadecrypt(ciphertext, privatekey)
|
|
```
|
|
|
|
`ciphertext` must be a base64-encoded representation of the ciphertext, using
|
|
the PKCS #1 v1.5 padding scheme. Nomad uses the "standard" Base64 alphabet
|
|
as defined in [RFC 4648 section 4](https://tools.ietf.org/html/rfc4648#section-4).
|
|
|
|
`privatekey` must be a PEM-encoded RSA private key that is not itself
|
|
encrypted.
|
|
|
|
Nomad has no corresponding function for _encrypting_ a message. Use this
|
|
function to decrypt ciphertexts returned by remote services using a keypair
|
|
negotiated out-of-band.
|
|
|
|
## Examples
|
|
|
|
```shell-session
|
|
> rsadecrypt(base64(file("${path.folder}/ciphertext")), file("privatekey.pem"))
|
|
Hello, world!
|
|
```
|