open-nomad/website/content/docs/configuration
Luiz Aoqui ab7eb5de6e
Support Vault entity aliases (#12449)
Move some common Vault API data struct decoding out of the Vault client
so it can be reused in other situations.

Make Vault job validation its own function so it's easier to expand it.

Rename the `Job.VaultPolicies` method to just `Job.Vault` since it
returns the full Vault block, not just their policies.

Set `ChangeMode` on `Vault.Canonicalize`.

Add some missing tests.

Allows specifying an entity alias that will be used by Nomad when
deriving the task Vault token.

An entity alias assigns an indentity to a token, allowing better control
and management of Vault clients since all tokens with the same indentity
alias will now be considered the same client. This helps track Nomad
activity in Vault's audit logs and better control over Vault billing.

Add support for a new Nomad server configuration to define a default
entity alias to be used when deriving Vault tokens. This default value
will be used if the task doesn't have an entity alias defined.
2022-04-05 14:18:10 -04:00
..
acl.mdx
audit.mdx
autopilot.mdx
client.mdx docs: remove deprecated client options parameters docs (#12416) 2022-03-31 11:45:51 -04:00
consul.mdx
index.mdx docs: clairfy advertise.rpc effect 2022-02-25 16:02:29 -06:00
plugin.mdx
search.mdx
sentinel.mdx
server.mdx
server_join.mdx
telemetry.mdx
tls.mdx
ui.mdx
vault.mdx Support Vault entity aliases (#12449) 2022-04-05 14:18:10 -04:00