ansible-vault
ansible-vault copied to clipboard
Help: TLS Certificates
Can someone please walk me through the process of enabling TLS communications using this role? I tried enabling it, but I am still missing something and the main config file has http connections instead of https.
Thanks in advance for the help.
After I added the following variable to my variable file for vault it enabled TLS:
vault_tls_disable: false
Make sure you have certificates ready and the API check uses the ip-address to check for reachability. So generate your certs with that in mind. If you are using self-signed certs make sure the CA is trusted on the target node. I also changed the vault_api_addr variable to:
vault_api_addr: "{{ vault_protocol }}://{{ ansible_fqdn }}:{{ vault_port }}"