Skip to content

Commit

Permalink
feat(security): Remove Vault dependency on Consul by using file backe…
Browse files Browse the repository at this point in the history
…nd instead of consul

 Change the Vault backend storage configuration from Consul to Filesystem so that we can remove the Vault dependency on Consul.

 The docker-compose file will also need to change to remove the -consul dependency from repo developer-script.

 The current edgex-consul healthy check on Vault also need to be remove as that check becomes superfluous.

 Closes: #2882

Signed-off-by: Jim Wang <yutsung.jim.wang@intel.com>
  • Loading branch information
jim-wang-intel committed Nov 19, 2020
1 parent 1173b5c commit 3a79bd6
Showing 1 changed file with 2 additions and 6 deletions.
8 changes: 2 additions & 6 deletions cmd/security-secrets-setup/start_vault.sh
Original file line number Diff line number Diff line change
Expand Up @@ -32,12 +32,8 @@ listener "tcp" {
tls_key_file = "'${VAULT_TLS_PATH}'/server.key"
tls_perfer_server_cipher_suites = "true"
}
backend "consul" {
path = "vault/"
address = "edgex-core-consul:8500"
scheme = "http"
redirect_addr = "https://edgex-vault:8200"
cluster_addr = "https://edgex-vault:8201"
backend "file" {
path = "vault/file"
}
default_lease_ttl = "168h"
max_lease_ttl = "720h"
Expand Down

0 comments on commit 3a79bd6

Please sign in to comment.