luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity

Add section for consul 1.4+ (#6366)

Browse source
This commit is contained in:
skarsol 2019-08-14 09:19:14 -05:00 committed by Chris Hoffman
parent a14b44ee8b
commit 073ff32900
1 changed files with 20 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
website/source/guides/operations/deployment-guide.html.md
View file

@ -162,6 +162,8 @@ Vault requires a Consul token with specific policy to limit the requests Vault c
On a host running a Consul agent, and using a Consul management token, create a Consul client token with specific policy for Vault:
### Consul < 1.4
```text
CONSUL_TOKEN="6609e426-1aeb-4b0d-c302-3a7568fbc1f9"
curl \
@ -171,10 +173,27 @@ curl \
'{
"Name": "Vault Token",
"Type": "client",
"Rules": "node \"\" { policy = \"write\" } service \"vault\" { policy = \"write\" } agent \"\" { policy = \"write\" } key \"vault\" { policy = \"write\" } session \"\" { policy = \"write\" } "
"Rules": "node \"\" { policy = \"write\" } service \"vault\" { policy = \"write\" } agent \"\" { policy = \"write\" } key \"vault/\" { policy = \"write\" } session \"\" { policy = \"write\" } "
}' http://127.0.0.1:8500/v1/acl/create
```
### Consul >= 1.4
```text
CONSUL_TOKEN="6609e426-1aeb-4b0d-c302-3a7568fbc1f9"
curl \
--request PUT \
--header "X-Consul-Token: ${CONSUL_TOKEN}" \
--data \
'{
"Name": "Vault Token",
"Type": "client",
"Rules": "node_prefix \"\" { policy = \"write\" } service \"vault\" { policy = \"write\" } agent_prefix \"\" { policy = \"write\" } key_prefix \"vault/\" { policy = \"write\" } session_prefix \"\" { policy = \"write\" } "
}' http://127.0.0.1:8500/v1/acl/create
```
The response includes the value you will use as the `token` parameter value in Vault's storage stanza configuration. An example response:
```json