Page MenuHomeDevCentral
Differential D2624

Deploy Vault
ClosedPublic
Actions

Authored by dereckson on Mar 25 2022, 21:10.
Tags
None
Referenced Files
F7546389: D2624.diff
Mon, Apr 28, 13:14
F7533874: D2624.diff
Mon, Apr 28, 08:29
F7491543: D2624.id6665.diff
Sun, Apr 27, 15:16
F7488317: D2624.diff
Sun, Apr 27, 14:11
Unknown Object (File)
Fri, Apr 25, 16:11
Unknown Object (File)
Thu, Apr 24, 16:20
Unknown Object (File)
Thu, Apr 24, 02:44
Unknown Object (File)
Thu, Apr 24, 02:42
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T928: Deploy Vault to store credentials
T1702: Deploy Complector aka la source
T923: Switch Vault to restricted network
Commits
rOPS7700b5298669: Deploy Vault
Summary

Storage back-end is raft/bbolt.

Test Plan

Deployed on Complector. Works fine, with the expected warning
3 ndoes are needed for Raft consensus.

Cluster is reacheable from 172.27.27.0/32, not from outside.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
vault
Build Status
Buildable 4119
Build 4371: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Mar 25 2022, 21:10
dereckson created this revision.
Harbormaster completed remote builds in B4119: Diff 6634.Mar 25 2022, 21:10
dereckson updated this revision to Diff 6662.Mar 26 2022, 14:58

Enforce end-to-end encryption for Vault

Harbormaster completed remote builds in B4134: Diff 6662.Mar 26 2022, 14:58
dereckson updated this revision to Diff 6663.Mar 26 2022, 14:59

Squash and rebase

Harbormaster completed remote builds in B4135: Diff 6663.Mar 26 2022, 14:59
dereckson updated this revision to Diff 6664.Mar 26 2022, 15:00

Remove 0 from modes, to be coherent with 9176f421b0be.

Harbormaster completed remote builds in B4136: Diff 6664.Mar 26 2022, 15:00
dereckson accepted this revision.Mar 26 2022, 15:00
This revision is now accepted and ready to land.Mar 26 2022, 15:00
Closed by commit rOPS7700b5298669: Deploy Vault (authored by dereckson). · Explain WhyMar 26 2022, 15:01
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPS7700b5298669: Deploy Vault.
dereckson added tasks: T923: Switch Vault to restricted network, T1702: Deploy Complector aka la source, T928: Deploy Vault to store credentials.Mar 29 2022, 22:54
dereckson mentioned this in D492: Vault configuration.May 12 2022, 11:38

Revision Contents
Changeset List

PathSize
roles/
vault/
9 lines
vault/
files/
30 lines
58 lines

Diff 6634

View Options

roles/vault/init.sls

Loading...
View Options

roles/vault/vault/files/vault.hcl

Loading...
View Options

roles/vault/vault/init.sls

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator