Skip to content

Commit

Permalink
docs: correction to Consul integration TLS note (#19207)
Browse files Browse the repository at this point in the history
  • Loading branch information
pkazmierczak authored Nov 28, 2023
1 parent ddb060d commit 26b778b
Showing 1 changed file with 5 additions and 4 deletions.
9 changes: 5 additions & 4 deletions website/content/docs/integrations/consul-integration.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -80,10 +80,11 @@ remaining fields are required to match those shown here.

<Note>

If you're using an https endpoint on Nomad server itself for JWKS, and your
server is configured with `tls.verify_https_client = true`, you will need to
provide a PEM-encoded CA cert for Consul, using a `JWKSCACert` field. Consult
Consul [JWT Auth Method][] documentation for more details.
If you're using an https endpoint on Nomad server itself for JWKS, your server
must be configured with `tls.verify_https_client = false`, because currently
there is no way to provide Nomad certificates to Consul (or Vault) clients. If
you want to use mTLS, which is the recommended practice, you need to terminate
TLS before the requests reach Nomad JWKS endpoint.

</Note>

Expand Down

0 comments on commit 26b778b

Please sign in to comment.