ansible-consul-acl

Administra ACL y Tokens de Consul de forma declarativa con Ansible.

Requisitos

• python-consul2 = ">=0.1.4"
• requests = "*"
• pyhcl = ">=0.4.4"

Inicio Rápido

ansible-galaxy install eagleusb.consul_acl

Variables

Ejemplo de Playbook

- name: "consul-acl"
  hosts: all
  roles:
    - role: "ansible-consul-acl"
      vars:
        consul_server:
          addr: "127.0.0.1"
          port: 8500
          scheme: "http"
        consul_master_token: "123-456-789"
        consul_client_token:
          - client: "foobar-todelete-later"
            token: "123-456-789"
          - client: "foobar-with-random-token"
          - client: "foobar-with-datacenters"
            datacenters:
              - "dc1"
          - client: "foobar-shuttle"
            token: "123-456-789"
            rules:
              event:
                "fiesta":
                    policy: write
              key:
                "foo/bar":
                  policy: read
                "foo/private":
                  policy: deny
              keyring: write
              node:
                "my-node":
                  policy: write
              operator: read
              query:
                "":
                  policy: write
              service:
                "consul":
                  policy: write
              session:
                "standup":
                  policy: write
        consul_remove_token:
          - client: "foobar-todelete-later"

Licencia

LICENCIA PÚBLICA GENERAL GNU Versión 3