Page MenuHomeDevCentral
Differential D2624

Deploy Vault
ClosedPublic
Actions

Authored by dereckson on Mar 25 2022, 21:10.
Tags
None
Referenced Files
F20231101: D2624.id6662.diff
Tue, Jan 6, 18:53
F20228531: D2624.id6664.diff
Tue, Jan 6, 18:01
F20208133: D2624.diff
Tue, Jan 6, 11:55
Unknown Object (File)
Sun, Jan 4, 16:22
Unknown Object (File)
Sun, Jan 4, 15:09
Unknown Object (File)
Sat, Jan 3, 21:19
Unknown Object (File)
Sat, Jan 3, 21:13
Unknown Object (File)
Sat, Jan 3, 21:10
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T928: Deploy Vault to store credentials
T1702: Deploy Complector aka la source
T923: Switch Vault to restricted network
Commits
rOPS7700b5298669: Deploy Vault
Summary

Storage back-end is raft/bbolt.

Test Plan

Deployed on Complector. Works fine, with the expected warning
3 ndoes are needed for Raft consensus.

Cluster is reacheable from 172.27.27.0/32, not from outside.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
vault
Build Status
Buildable 4134
Build 4386: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Mar 25 2022, 21:10
dereckson created this revision.
Harbormaster completed remote builds in B4119: Diff 6634.Mar 25 2022, 21:10
dereckson updated this revision to Diff 6662.Mar 26 2022, 14:58

Enforce end-to-end encryption for Vault

Harbormaster completed remote builds in B4134: Diff 6662.Mar 26 2022, 14:58
dereckson updated this revision to Diff 6663.Mar 26 2022, 14:59

Squash and rebase

Harbormaster completed remote builds in B4135: Diff 6663.Mar 26 2022, 14:59
dereckson updated this revision to Diff 6664.Mar 26 2022, 15:00

Remove 0 from modes, to be coherent with 9176f421b0be.

Harbormaster completed remote builds in B4136: Diff 6664.Mar 26 2022, 15:00
dereckson accepted this revision.Mar 26 2022, 15:00
This revision is now accepted and ready to land.Mar 26 2022, 15:00
Closed by commit rOPS7700b5298669: Deploy Vault (authored by dereckson). · Explain WhyMar 26 2022, 15:01
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPS7700b5298669: Deploy Vault.
dereckson added tasks: T923: Switch Vault to restricted network, T1702: Deploy Complector aka la source, T928: Deploy Vault to store credentials.Mar 29 2022, 22:54
dereckson mentioned this in D492: Vault configuration.May 12 2022, 11:38

Revision Contents
Changeset List

PathSize
roles/
vault/
9 lines
vault/
files/
35 lines
59 lines

Diff 6662

View Options

roles/vault/init.sls

Loading...
View Options

roles/vault/vault/files/vault.hcl

Loading...
View Options

roles/vault/vault/init.sls

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator