D2640.id6671.diff
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

D2640.id6671.diff
View Options

	diff --git a/roles/vault/vault/files/vault.hcl b/roles/vault/vault/files/vault.hcl
	--- a/roles/vault/vault/files/vault.hcl
	+++ b/roles/vault/vault/files/vault.hcl
	@@ -15,12 +15,12 @@

	listener "tcp" {
	address = "{{ ip }}:8200"
	-{% if certificates_available %}
	- tls_cert_file: "/usr/local/etc/certificates/vault/fullchain.pem"
	- tls_key_file: "/usr/local/etc/certificates/vault/private.key"
	+{%- if certificates_available %}
	+ tls_cert_file = "/usr/local/etc/certificates/vault/fullchain.pem"
	+ tls_key_file = "/usr/local/etc/certificates/vault/private.key"
	{% else %}
	tls_disable = 1
	-{% endif %}
	+{% endif -%}
	}

	storage "raft" {
	diff --git a/roles/vault/vault/init.sls b/roles/vault/vault/init.sls
	--- a/roles/vault/vault/init.sls
	+++ b/roles/vault/vault/init.sls
	@@ -27,7 +27,7 @@
	- context:
	id: {{ grains['id'] }}
	ip: {{ network['ipv4_address'] }}
	- certificates_available: {{ salt["file.file_exists"]("/usr/local/etc/certificates/vault") }}
	+ certificates_available: {{ salt["file.file_exists"]("/usr/local/etc/certificates/vault/fullchain.pem") }}

	# -------------------------------------------------------------
	# Storage