Skip to content

Commit ee103bd

Browse files
author
Myztiq
committed
Updated auth tokens and readme
1 parent 89f0b2f commit ee103bd

2 files changed

Lines changed: 8 additions & 5 deletions

File tree

ansible/delta-hosts/variables

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -143,7 +143,7 @@ aws_access_key_id=AKIAJ3RCYU6FCULAJP2Q
143143
aws_secret_access_key=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
144144

145145
[starlord:vars]
146-
starlord_vault_token=1234
146+
starlord_vault_token=319ff979-b066-87c7-1172-6f3b5305d749
147147

148148
[swarm-manager:vars]
149149
environment_name=delta
@@ -201,6 +201,7 @@ vault_token_03=47f3cb74f5374fa3c51c90fd25e3d4cc851034de97584995fce5fc5382342f1f0
201201
rabbit_port=54321
202202
registry_username=runnable+deltapush
203203
registry_token=4PX2AU9QIJSCDLZEXILYX6ZP2RCXY1HR10WVZKWVR0JW8DS5IIY87D96V0RACMK5
204+
dock_vault_user_creation_access_token=ddf20c34-019c-5b24-9c0d-1b44e3edf29a
204205

205206
[web:vars]
206207
web_intercom_id=wqzm3rju

ansible/roles/vault/additional-files/user-vault/README.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,9 @@ Grab the keys, put them in 1password
2222

2323
Verify the vault unsealed
2424

25-
`vault auth $rootToken`
25+
`vault auth`
26+
Paste in the $rootToken
27+
2628

2729
Now to setup the policies:
2830

@@ -40,13 +42,13 @@ Now to setup new token for starlord:
4042

4143
`vault token-create -policy="organizations-writeonly" -ttl="8760h"`
4244

43-
Take the response of this and save it in the configuration for the environment you want.
45+
Take the response of this and save it in the configuration for the environment you want as the `starlord_vault_token`
4446

4547
Create a new token for the docks, so they can create readonly tokens.
4648

4749
`vault token-create -policy="dock-user-creator" -ttl="8760h"`
4850

49-
Save that token as the dock-creator token
51+
Save that token as the `dock_vault_user_creation_access_token`
5052

51-
This allows the vault user to create a new user!
53+
This allows the vault user to create a new user using:
5254
vault write -f auth/token/create/organizations-readonly

0 commit comments

Comments
 (0)