Skip to content
This repository has been archived by the owner on Jan 25, 2023. It is now read-only.

v0.14.2
Compare
Choose a tag to compare
@brikis98 brikis98 released this 16 Feb 11:13
· 41 commits to master since this release
v0.14.2
f1ac700
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Modules affected

  • run-vault

Description

  • When using a backend other than Consul, run-vault will now explicitly configure Vault to register itself as a service in Consul. Otherwise, if you're using some other backend, such as S3, service discovery won't work correctly. You can configure the Consul agent address to use for registration via the new --consul-agent-service-registration-address argument (the default is localhost:8500).
  • Updated the systemd config that run-vault sets up for Vault:
    • Configure reasonable defaults for StartLimitIntervalSec and StartLimitBurst so Vault doesn't infinitely try to restart in case of a permanent error.
    • Set LimitMEMLOCK to infinity to prevent memory from being swapped to disk.
  • We've updated the examples to use more modern versions:
    • Bump Vault to 1.6.1
    • Bump Consul to 1.9.2

Related links

Assets 2