Infra: Vault

[csit.git] / fdio.infra.ansible / roles / vault / templates / vault_backend_consul.j2

diff --git a/fdio.infra.ansible/roles/vault/templates/vault_backend_consul.j2 b/fdio.infra.ansible/roles/vault/templates/vault_backend_consul.j2
new file mode 100644 (file)
index 0000000..c45498a
--- /dev/null
+++ b/fdio.infra.ansible/roles/vault/templates/vault_backend_consul.j2
@@ -0,0 +1,15 @@
+backend "consul" {
+    address = "{{ vault_consul }}"
+    path = "{{ vault_consul_path }}"
+    service = "{{ vault_consul_service }}"
+    {% if vault_consul_token is defined and vault_consul_token -%}
+    token = "{{ vault_consul_token }}"
+    {% endif -%}
+    scheme = "{{ vault_consul_scheme }}"
+    {% if vault_tls_gossip | bool -%}
+    tls_cert_file = "{{ vault_backend_tls_config_path }}/{{ vault_backend_tls_cert_file }}"
+    tls_key_file = "{{ vault_backend_tls_config_path }}/{{ vault_backend_tls_key_file }}"
+    tls_ca_file="{{ vault_backend_tls_config_path }}/{{ vault_backend_tls_ca_file }}"
+    {% endif %}
+
+}
\ No newline at end of file