3d7f9a402f
* VAULT-6368 Metrics-only listener for Agent * VAULT-6368 changelog * VAULT-6368 Update config to use string instead of bool * VAULT-6368 Fix leftover code * VAULT-6368 Fix changelog * VAULT-6368 fix typo * VAULT-6368 recommended doc update * VAULT-6368 use != over !(==)
68 lines
1.1 KiB
HCL
68 lines
1.1 KiB
HCL
pid_file = "./pidfile"
|
|
|
|
auto_auth {
|
|
method {
|
|
type = "aws"
|
|
config = {
|
|
role = "foobar"
|
|
}
|
|
}
|
|
|
|
sink {
|
|
type = "file"
|
|
config = {
|
|
path = "/tmp/file-foo"
|
|
}
|
|
aad = "foobar"
|
|
dh_type = "curve25519"
|
|
dh_path = "/tmp/file-foo-dhpath"
|
|
}
|
|
}
|
|
|
|
cache {
|
|
use_auto_auth_token = true
|
|
persist = {
|
|
type = "kubernetes"
|
|
path = "/vault/agent-cache/"
|
|
keep_after_import = true
|
|
exit_on_err = true
|
|
service_account_token_file = "/tmp/serviceaccount/token"
|
|
}
|
|
}
|
|
|
|
listener "unix" {
|
|
address = "/path/to/socket"
|
|
tls_disable = true
|
|
socket_mode = "configmode"
|
|
socket_user = "configuser"
|
|
socket_group = "configgroup"
|
|
}
|
|
|
|
listener "tcp" {
|
|
address = "127.0.0.1:8300"
|
|
tls_disable = true
|
|
}
|
|
|
|
listener {
|
|
type = "tcp"
|
|
address = "127.0.0.1:3000"
|
|
tls_disable = true
|
|
role = "metrics_only"
|
|
}
|
|
|
|
listener "tcp" {
|
|
role = "default"
|
|
address = "127.0.0.1:8400"
|
|
tls_key_file = "/path/to/cakey.pem"
|
|
tls_cert_file = "/path/to/cacert.pem"
|
|
}
|
|
|
|
vault {
|
|
address = "http://127.0.0.1:1111"
|
|
ca_cert = "config_ca_cert"
|
|
ca_path = "config_ca_path"
|
|
tls_skip_verify = "true"
|
|
client_cert = "config_client_cert"
|
|
client_key = "config_client_key"
|
|
}
|