File tree Expand file tree Collapse file tree
roles/vault/additional-files/user-vault Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -143,7 +143,7 @@ aws_access_key_id=AKIAJ3RCYU6FCULAJP2Q
143143aws_secret_access_key=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
144144
145145[starlord:vars]
146- starlord_vault_token=1234
146+ starlord_vault_token=319ff979-b066-87c7-1172-6f3b5305d749
147147
148148[swarm-manager:vars]
149149environment_name=delta
@@ -201,6 +201,7 @@ vault_token_03=47f3cb74f5374fa3c51c90fd25e3d4cc851034de97584995fce5fc5382342f1f0
201201rabbit_port=54321
202202registry_username=runnable+deltapush
203203registry_token=4PX2AU9QIJSCDLZEXILYX6ZP2RCXY1HR10WVZKWVR0JW8DS5IIY87D96V0RACMK5
204+ dock_vault_user_creation_access_token=ddf20c34-019c-5b24-9c0d-1b44e3edf29a
204205
205206[web:vars]
206207web_intercom_id=wqzm3rju
Original file line number Diff line number Diff line change @@ -22,7 +22,9 @@ Grab the keys, put them in 1password
2222
2323Verify the vault unsealed
2424
25- ` vault auth $rootToken `
25+ ` vault auth `
26+ Paste in the $rootToken
27+
2628
2729Now to setup the policies:
2830
@@ -40,13 +42,13 @@ Now to setup new token for starlord:
4042
4143` vault token-create -policy="organizations-writeonly" -ttl="8760h" `
4244
43- Take the response of this and save it in the configuration for the environment you want.
45+ Take the response of this and save it in the configuration for the environment you want as the ` starlord_vault_token `
4446
4547Create a new token for the docks, so they can create readonly tokens.
4648
4749` vault token-create -policy="dock-user-creator" -ttl="8760h" `
4850
49- Save that token as the dock-creator token
51+ Save that token as the ` dock_vault_user_creation_access_token `
5052
51- This allows the vault user to create a new user!
53+ This allows the vault user to create a new user using:
5254vault write -f auth/token/create/organizations-readonly
You can’t perform that action at this time.
0 commit comments