mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-18 04:27:02 +02:00
6b4b0f7aaf
* VAULT-15547 First pass at agent/proxy decoupling * VAULT-15547 Fix some imports * VAULT-15547 cases instead of string.Title * VAULT-15547 changelog * VAULT-15547 Fix some imports * VAULT-15547 some more dependency updates * VAULT-15547 More dependency paths * VAULT-15547 godocs for tests * VAULT-15547 godocs for tests * VAULT-15547 test package updates * VAULT-15547 test packages * VAULT-15547 add proxy to test packages * VAULT-15547 gitignore * VAULT-15547 address comments * VAULT-15547 Some typos and small fixes
76 lines
1.3 KiB
HCL
76 lines
1.3 KiB
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
|
|
pid_file = "./pidfile"
|
|
|
|
auto_auth {
|
|
method {
|
|
type = "aws"
|
|
config = {
|
|
role = "foobar"
|
|
}
|
|
}
|
|
|
|
sink {
|
|
type = "file"
|
|
config = {
|
|
path = "/tmp/file-foo"
|
|
}
|
|
aad = "foobar"
|
|
dh_type = "curve25519"
|
|
dh_path = "/tmp/file-foo-dhpath"
|
|
}
|
|
}
|
|
|
|
api_proxy {
|
|
use_auto_auth_token = true
|
|
enforce_consistency = "always"
|
|
when_inconsistent = "retry"
|
|
}
|
|
|
|
cache {
|
|
persist = {
|
|
type = "kubernetes"
|
|
path = "/vault/agent-cache/"
|
|
keep_after_import = true
|
|
exit_on_err = true
|
|
service_account_token_file = "/tmp/serviceaccount/token"
|
|
}
|
|
}
|
|
|
|
listener "unix" {
|
|
address = "/path/to/socket"
|
|
tls_disable = true
|
|
socket_mode = "configmode"
|
|
socket_user = "configuser"
|
|
socket_group = "configgroup"
|
|
}
|
|
|
|
listener "tcp" {
|
|
address = "127.0.0.1:8300"
|
|
tls_disable = true
|
|
}
|
|
|
|
listener {
|
|
type = "tcp"
|
|
address = "127.0.0.1:3000"
|
|
tls_disable = true
|
|
role = "metrics_only"
|
|
}
|
|
|
|
listener "tcp" {
|
|
role = "default"
|
|
address = "127.0.0.1:8400"
|
|
tls_key_file = "/path/to/cakey.pem"
|
|
tls_cert_file = "/path/to/cacert.pem"
|
|
}
|
|
|
|
vault {
|
|
address = "http://127.0.0.1:1111"
|
|
ca_cert = "config_ca_cert"
|
|
ca_path = "config_ca_path"
|
|
tls_skip_verify = "true"
|
|
client_cert = "config_client_cert"
|
|
client_key = "config_client_key"
|
|
}
|