richard
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
3431 Commits
29 Branches
81 Tags
150 MiB
Tree: 82a28d6bb3
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '82a28d6bb3'
${ noResults }
kubespray/roles/vault/templates/host.service.j2

15 lines
309 B
Raw Normal View History

Vault security hardening and role isolation
7 years ago
​
​
​
​
​
Service file binary place mismatch According to cluster/binary.yml vault binary will be placed to `{{ bin_dir }}` and according to `inventory/sample/group_vars/all.yml` that is `inventory/sample/group_vars/all.yml`
6 years ago
Vault security hardening and role isolation
7 years ago
​
​
​
​
​
​
​
  1. [Unit]
  2. Description=vault
  3. After=network.target
  5. [Service]
  6. AmbientCapabilities=CAP_IPC_LOCK
  7. ExecStart={{ bin_dir }}/vault server --config={{ vault_config_dir }}/config.json
  8. LimitNOFILE=40000
  9. NotifyAccess=all
  10. Restart=always
  11. RestartSec=10s
  12. User={{ vault_adduser_vars.name }}
  14. [Install]
  15. WantedBy=multi-user.target