Page MenuHomeDevCentral
Differential D2624

Deploy Vault
ClosedPublic
Actions

Authored by dereckson on Mar 25 2022, 21:10.
Tags
None
Referenced Files
F12387799: D2624.id6664.diff
Sat, Nov 1, 05:12
F12387796: D2624.id6634.diff
Sat, Nov 1, 05:12
F12385612: D2624.id6634.diff
Sat, Nov 1, 02:06
F12384946: D2624.id6662.diff
Fri, Oct 31, 23:50
F12378843: D2624.id6662.diff
Fri, Oct 31, 10:06
Unknown Object (File)
Fri, Oct 31, 05:39
Unknown Object (File)
Fri, Oct 31, 04:20
Unknown Object (File)
Fri, Oct 31, 04:05
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T928: Deploy Vault to store credentials
T1702: Deploy Complector aka la source
T923: Switch Vault to restricted network
Commits
rOPS7700b5298669: Deploy Vault
Summary

Storage back-end is raft/bbolt.

Test Plan

Deployed on Complector. Works fine, with the expected warning
3 ndoes are needed for Raft consensus.

Cluster is reacheable from 172.27.27.0/32, not from outside.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Mar 25 2022, 21:10
dereckson created this revision.
Harbormaster completed remote builds in B4119: Diff 6634.Mar 25 2022, 21:10
dereckson updated this revision to Diff 6662.Mar 26 2022, 14:58

Enforce end-to-end encryption for Vault

Harbormaster completed remote builds in B4134: Diff 6662.Mar 26 2022, 14:58
dereckson updated this revision to Diff 6663.Mar 26 2022, 14:59

Squash and rebase

Harbormaster completed remote builds in B4135: Diff 6663.Mar 26 2022, 14:59
dereckson updated this revision to Diff 6664.Mar 26 2022, 15:00

Remove 0 from modes, to be coherent with 9176f421b0be.

Harbormaster completed remote builds in B4136: Diff 6664.Mar 26 2022, 15:00
dereckson accepted this revision.Mar 26 2022, 15:00
This revision is now accepted and ready to land.Mar 26 2022, 15:00
Closed by commit rOPS7700b5298669: Deploy Vault (authored by dereckson). · Explain WhyMar 26 2022, 15:01
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPS7700b5298669: Deploy Vault.
dereckson added tasks: T923: Switch Vault to restricted network, T1702: Deploy Complector aka la source, T928: Deploy Vault to store credentials.Mar 29 2022, 22:54
dereckson mentioned this in D492: Vault configuration.May 12 2022, 11:38

Revision Contents
Changeset List

PathSize
roles/
vault/
9 lines
vault/
files/
35 lines
59 lines

Diff 6665

View Options

roles/vault/init.sls

Loading...
View Options

roles/vault/vault/files/vault.hcl

Loading...
View Options

roles/vault/vault/init.sls

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator