Differential D4026
Deploy or rotate Vault secrets Authored by dereckson on Mon, Mar 23, 00:32. Tags None Referenced Files
Subscribers None
Details
Terraform/OpenTofu is handling both the policies and the credentials to allow Once the AppRole have been created or updated in Vault by Terraform/OpenTofu, This make deploy-secrets target allows to automate each steps and do a full Reference: https://agora.nasqueron.org/Operations_grimoire/Deploy_with_Terraform
Diff Detail
Event TimelineComment Actions Note: we're deploying a third secret for CARP routers scripts. If we've already that code merged, we'll need to append a line to deploy that state too. Comment Actions How to target router-002 and router-003 through grains -G, --grain The target expression matches values returned by the Salt grains system on the minions. The target expression is in the format of '<grain value>:<glob expression>'; example: 'os:Arch*' This was changed in version 0.9.8 to accept glob expressions instead of regular expression. To use regular expression matching with grains, use the --grain-pcre option. --grain-pcre The target expression matches values returned by the Salt grains system on the minions. The target expression is in the format of '<grain value>:< regular expression>'; example: 'os:Arch.*' |