Page MenuHomeDevCentral
Differential D2624

Deploy Vault
ClosedPublic
Actions

Authored by dereckson on Mar 25 2022, 21:10.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Nov 13, 05:30
Unknown Object (File)
Mon, Nov 11, 20:18
Unknown Object (File)
Mon, Nov 11, 07:30
Unknown Object (File)
Fri, Nov 8, 03:01
Unknown Object (File)
Sun, Nov 3, 19:53
Unknown Object (File)
Sat, Nov 2, 17:27
Unknown Object (File)
Sat, Nov 2, 17:26
Unknown Object (File)
Mon, Oct 28, 16:50
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T928: Deploy Vault to store credentials
T1702: Deploy Complector aka la source
T923: Switch Vault to restricted network
Commits
rOPS7700b5298669: Deploy Vault
Summary

Storage back-end is raft/bbolt.

Test Plan

Deployed on Complector. Works fine, with the expected warning
3 ndoes are needed for Raft consensus.

Cluster is reacheable from 172.27.27.0/32, not from outside.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
vault
Build Status
Buildable 4119
Build 4371: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Mar 25 2022, 21:10
dereckson created this revision.
Harbormaster completed remote builds in B4119: Diff 6634.Mar 25 2022, 21:10
dereckson updated this revision to Diff 6662.Mar 26 2022, 14:58

Enforce end-to-end encryption for Vault

Harbormaster completed remote builds in B4134: Diff 6662.Mar 26 2022, 14:58
dereckson updated this revision to Diff 6663.Mar 26 2022, 14:59

Squash and rebase

Harbormaster completed remote builds in B4135: Diff 6663.Mar 26 2022, 14:59
dereckson updated this revision to Diff 6664.Mar 26 2022, 15:00

Remove 0 from modes, to be coherent with 9176f421b0be.

Harbormaster completed remote builds in B4136: Diff 6664.Mar 26 2022, 15:00
dereckson accepted this revision.Mar 26 2022, 15:00
This revision is now accepted and ready to land.Mar 26 2022, 15:00
Closed by commit rOPS7700b5298669: Deploy Vault (authored by dereckson). · Explain WhyMar 26 2022, 15:01
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPS7700b5298669: Deploy Vault.
dereckson added tasks: T923: Switch Vault to restricted network, T1702: Deploy Complector aka la source, T928: Deploy Vault to store credentials.Mar 29 2022, 22:54
dereckson mentioned this in D492: Vault configuration.May 12 2022, 11:38

Revision Contents
Changeset List

PathSize
roles/
vault/
9 lines
vault/
files/
30 lines
58 lines

Diff 6634

View Options

roles/vault/init.sls

Loading...
View Options

roles/vault/vault/files/vault.hcl

Loading...
View Options

roles/vault/vault/init.sls

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator