mirror of
https://github.com/hashicorp/vault.git
synced 2025-12-07 02:21:10 +01:00
c6da02962d
* Add a configuration flag for enabling multiseal (Seal HA), CE side * imports * no quotes * get rid of dep on ent config * Abstract enableMultiSeal for a build time switch * license headers * wip * gate physical seal gen fetch by a param * docs tweak, remove core flag * updates from the ent pr * update stub * update test fixtures for enable_multiseal * use accessor * add a test fixture for non-multiseal diagnose * remove debugging crtuch * Do handle phys seal gen info even if multiseal is off, in order to facilitate enable/disable safeties * more enabled flag handling * Accept seal gen info if we were previously disabled, and persist it * update unit test * Validation happens postUnseal, so this test is invalid * Dont continue setting conf if seal loading fails during SIGHUP * Update website/content/docs/configuration/seal/seal-ha.mdx Thanks, that does sound much clearer Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com> * use validation if previous gen was enabled * unit test update * stub SetMultisealEnabled * bring over more changes from ent * this was an unfix --------- Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
60 lines
1.3 KiB
HCL
60 lines
1.3 KiB
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
disable_cache = true
|
|
disable_mlock = true
|
|
|
|
ui = true
|
|
|
|
listener "tcp" {
|
|
address = "127.0.0.1:1024"
|
|
tls_disable = true
|
|
}
|
|
|
|
backend "consul" {
|
|
address = "127.0.0.1:8500"
|
|
foo = "bar"
|
|
advertise_addr = "foo"
|
|
}
|
|
|
|
seal "transit" {
|
|
|
|
// TLS Configuration
|
|
tls_ca_cert = "./../vault/diagnose/test-fixtures/chain.crt.pem"
|
|
tls_client_cert = "./../vault/diagnose/test-fixtures/goodcertwithroot.pem"
|
|
tls_client_key = "./../vault/diagnose//test-fixtures/goodkey.pem"
|
|
tls_server_name = "vault"
|
|
tls_skip_verify = "false"
|
|
}
|
|
|
|
ha_backend "consul" {
|
|
address = "127.0.0.1:8500"
|
|
bar = "baz"
|
|
advertise_addr = "https://127.0.0.1:8500"
|
|
disable_clustering = "true"
|
|
}
|
|
|
|
service_registration "consul" {
|
|
address = "127.0.0.1:8500"
|
|
foo = "bar"
|
|
}
|
|
|
|
telemetry {
|
|
statsd_address = "bar"
|
|
usage_gauge_period = "5m"
|
|
maximum_gauge_cardinality = 100
|
|
|
|
statsite_address = "foo"
|
|
dogstatsd_addr = "127.0.0.1:7254"
|
|
dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
|
|
metrics_prefix = "myprefix"
|
|
}
|
|
|
|
max_lease_ttl = "10h"
|
|
default_lease_ttl = "10h"
|
|
cluster_name = "testcluster"
|
|
pid_file = "./pidfile"
|
|
raw_storage_endpoint = true
|
|
disable_sealwrap = true
|
|
disable_printable_check = true
|
|
enable_multiseal = true |