optiz0r

{{- range services -}}
  {{- if .Name | contains "sidecar" | not -}}
    {{- $groupedServices := (service .Name | byMeta "caddy_enable") -}}
    {{- $enabledServices := (index $groupedServices "true" ) -}}
    {{- range $enabledServices -}}
      {{- $vhost := index .ServiceMeta "caddy_vhost" -}}
      {{- scratch.MapSetX "vhosts" $vhost . -}}
    {{- end -}}
  {{- end -}}
{{- end -}}  

optiz0r

    # class params
    $socket_group=undef
    $docker_users=[]
    
    # Override defaults which try to specify which repo to install from
    # we install from spacewalk with different reponames, and will just install
    # the latest version available
    $repo_opt = {}

            $dist_specific_opts = {

optiz0r

Upgrade Vault Cluster

This Choria Playbook will automate the steps to do a simple version upgrade of a Vault cluster

• Upgrades follower servers first
• Upgrades the leader last (to reduce risk of a failover from newer version to older one)
• Sleeps in between each upgrade to allow operator unseal to be run, and for vault to re-register itself in service discovery
• Bulk updates all clients

Warning!

optiz0r

# Allow clients to auth using puppet certificates

resource "vault_auth_backend" "host_certs" {
  path = "host_certs"
  type = "cert"
}

resource "vault_cert_auth_backend_role" "puppet_certificate" {
  name             = "puppet_certificate"
  backend          = vault_auth_backend.host_certs.path