ansible-collections/hashistack
ansible-collections/hashistack
4
0
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

feat(vault): adjust default values for allowing multiple tcp and unix socket listeners

Browse Source
This commit is contained in:
Bertrand Lanson 2024-07-21 23:32:50 +02:00
parent 61087388e6
commit f73b7bb63e
Signed by: lanson
SSH Key Fingerprint: SHA256:/nqc6HGqld/PS208F6FUOvZlUzTS0rGpNNwR5O2bQBw
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
roles/vault/defaults/main.yml
View File

@ -48,23 +48,23 @@ vault_storage_configuration:
vault_enable_tls: false
vault_listener_configuration:
tcp:
address: "{{ vault_cluster_addr }}:8200"
tls_disable: true
- tcp:
address: "{{ vault_cluster_addr }}:8200"
tls_disable: true
vault_tls_listener_configuration:
tcp:
tls_disable: false
tls_cert_file: "{{ vault_certs_dir }}/cert.pem"
tls_key_file: "{{ vault_certs_dir }}/key.pem"
tls_disable_client_certs: true
- tcp:
tls_disable: false
tls_cert_file: "{{ vault_certs_dir }}/cert.pem"
tls_key_file: "{{ vault_certs_dir }}/key.pem"
tls_disable_client_certs: true
vault_certificates_extra_files_dir:
[]
# - src: ""
# dest: "{{ vault_certs_dir }}"
vault_extra_listener_configuration: {}
vault_extra_listener_configuration: []
########################
# service registration #