diff --git a/website/pages/docs/job-specification/vault.mdx b/website/pages/docs/job-specification/vault.mdx index 996f3641abd6..f823659c5c93 100644 --- a/website/pages/docs/job-specification/vault.mdx +++ b/website/pages/docs/job-specification/vault.mdx @@ -71,6 +71,10 @@ with Vault as well. - `env` `(bool: true)` - Specifies if the `VAULT_TOKEN` and `VAULT_NAMESPACE` environment variables should be set when starting the task. +- `namespace` `(string: "")` - Specifies the Vault Namespace + to use for the task. The Nomad client will retrieve a Vault token that is scoped to + this particular namespace. + - `policies` `(array: [])` - Specifies the set of Vault policies that the task requires. The Nomad client will retrieve a Vault token that is limited to those policies. @@ -106,6 +110,22 @@ vault { } ``` +### Vault Namespace + +This example shows specifying a particular Vault namespace for a given task. + + + +```hcl +vault { + policies = ["frontend"] + namespace = "engineering/frontend" + + change_mode = "signal" + change_signal = "SIGINT" +} +``` + [restart]: /docs/job-specification/restart 'Nomad restart Job Specification' [template]: /docs/job-specification/template 'Nomad template Job Specification' [vault]: https://www.vaultproject.io/ 'Vault by HashiCorp'