Deploy `/etc/vault.d/vault.env` to enable AWS KMS.

2024-07-15 21:28:07 +09:00 · 2024-07-15 21:28:07 +09:00 · e21fa08291
parent 44ca217183
commit e21fa08291
1 changed files with 10 additions and 0 deletions
--- a/cookbooks/vault/setup.rb
+++ b/cookbooks/vault/setup.rb
@ -9,6 +9,16 @@ template '/etc/vault.d/vault.hcl' do
  notifies :restart, 'service[vault]'
 end

+encrypted_remote_file '/etc/vault.d/vault.env' do
+  owner 'vault'
+  group 'vault'
+  mode '600'
+  source   'files/etc/vault.d/vault.env'
+  password ENV['ITAMAE_PASSWORD']
+
+  notifies :restart, 'service[vault]'
+end
+
 directory '/etc/vault.d/policies' do
  owner 'vault'
  group 'vault'