Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Vault agent in service and config file #61

Merged
merged 4 commits into from
Jan 20, 2025
Merged

Support Vault agent in service and config file #61

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
d4875df
Add Vault agent support in service and configuration file
sasudi90 Jan 16, 2025
d739f47
add tests
sasudi90 Jan 17, 2025
b539b4a
update ref
sasudi90 Jan 17, 2025
375e8ca
need creds to have service running
sasudi90 Jan 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 37 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -171,6 +171,42 @@ vault::storage:
- leader_api_addr: https://vault3:8200
```

## Vault Agent Configuration

When running Vault in agent mode (`mode => 'agent'`), you can configure the agent behavior using these parameters:

```puppet
class { 'vault':
mode => 'agent',
agent_vault => {
'address' => 'https://vault.example.com:8200'
},
agent_auto_auth => {
'method' => [{
'type' => 'approle',
'mount_path' => 'auth/approle',
'config' => {
'role_id_file_path' => '/etc/vault/role-id',
'secret_id_file_path' => '/etc/vault/secret-id'
}
}
}],
agent_cache => {
'use_auto_auth_token' => true
},
agent_listeners => [{
'tcp' => {
'address' => '127.0.0.1:8100',
'tls_disable' => true
}
}],
agent_template => {
'source' => '/etc/vault/template.ctmpl',
'destination' => '/etc/myapp/config.yml'
}
}
```

## mlock

By default vault will use the `mlock` system call, therefore the executable will need the corresponding capability.
Expand Down Expand Up @@ -205,4 +241,4 @@ This module was forked from https://github.com/jsok/puppet-vault
## Related Projects

* [hiera-vault](https://github.com/petems/petems-hiera_vault): A Hiera storage backend to retrieve secrets from Hashicorp's Vault
* [vault_lookup](https://github.com/voxpupuli/puppet-vault_lookup): A puppet (deferred) function to do lookups in Vault
* [vault_lookup](https://github.com/voxpupuli/puppet-vault_lookup): A puppet (deferred) function to do lookups in Vault
Loading
Loading