Skip to content

Instantly share code, notes, and snippets.

@HanSooloo
Created May 3, 2017 02:34
Show Gist options
  • Save HanSooloo/42e67df56eae61b52adb4d354e2051e0 to your computer and use it in GitHub Desktop.
Save HanSooloo/42e67df56eae61b52adb4d354e2051e0 to your computer and use it in GitHub Desktop.
# Configure vault server
class profiles::vault::server {
file { '/srv':
ensure => directory,
before => Class['::vault'],
}
class { '::vault':
version => '0.7.0',
backend => { 'file' => {
'path' => '/srv/vault',
'manage_backend_dir' => 'true',
},
},
listener => { 'tcp' => {
'address' => '127.0.0.1:8200',
'tls_disable' => 1,
},
},
}
file_line { 'vault_addr':
ensure => present,
path => '/etc/environment',
line => 'VAULT_ADDR=http://127.0.0.1:8200',
}
$vault_files = [
'/var/local/bootstrap',
'/var/local/bootstrap/00.vault_params',
'/var/local/bootstrap/01.init_vault.sh',
'/var/local/bootstrap/02.unseal_vault.sh'
]
file { '/var/local/bootstrap':
ensure => directory,
owner => 'root',
group => 'root',
mode => '0700',
}
file { '/var/local/bootstrap/00.vault_params':
ensure => present,
owner => 'root',
group => 'root',
mode => '0700',
content => file('profiles/vault/00.vault_params'),
}
file { '/var/local/bootstrap/01.init_vault.sh':
ensure => present,
owner => 'root',
group => 'root',
mode => '0700',
content => file('profiles/vault/01.init_vault.sh'),
}
file { '/var/local/bootstrap/02.unseal_vault.sh':
ensure => present,
owner => 'root',
group => 'root',
mode => '0700',
content => file('profiles/vault/02.unseal_vault.sh'),
}
exec { '01.init_vault.sh':
command => '/var/local/bootstrap/01.init_vault.sh',
cwd => '/var/local/bootstrap',
creates => '/var/local/bootstrap/ij',
}
exec {'02.unseal_vault.sh':
command => '/var/local/bootstrap/02.unseal_vault.sh',
cwd => '/var/local/bootstrap',
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment