Skip to content

vault job from safe/0.0.1

Github source: e8ac4ca0 or master branch

Properties

safe

cluster_ips

List of internal IP addresses of all members of the Vault Cluster

peer

port

TCP port to use for peer-to-peer communication

Default
8100
tls
ca

TLS CA certificate to use for verifying peer-to-peer communication. If not provided, a self-signed certificate will be automatically generated and used.

certificate

TLS certificate to use for peer-to-peer communication. If not provided, a self-signed certificate will be automatically generated and used.

key

TLS private key to use for peer-to-peer communication. If not provided, a self-signed certificate will be automatically generated and used.

verify

Verify the TLS certificates presented by the Consul backend

Default
true

port

TCP port to bind the Vault on. Defaults to 443.

Default
443

tls

certificate

TLS certificate to use for securing communnication with clients.

key

TLS private key to use for securing communication with clients.

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/vault/ directory (learn more).

  • bin/consul (from bin/consul)
  • bin/monit_debugger (from bin/monit_debugger)
  • bin/strongbox (from bin/strongbox)
  • bin/vault (from bin/vault)
  • config/consul.conf (from config/consul.conf)
  • config/vault.conf (from config/vault.conf)
  • data/properties.sh (from data/properties.sh.erb)
  • helpers/ctl_setup.sh (from helpers/ctl_setup.sh)
  • helpers/ctl_utils.sh (from helpers/ctl_utils.sh)
  • tls/peer/ca.pem (from tls/peer/ca.pem)
  • tls/peer/cert.pem (from tls/peer/cert.pem)
  • tls/peer/key.pem (from tls/peer/key.pem)
  • tls/vault/cert.pem (from tls/vault/cert.pem)
  • tls/vault/key.pem (from tls/vault/key.pem)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.