-
Notifications
You must be signed in to change notification settings - Fork 4.2k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* docs: add persistent cache * Clarify documentation * Update website/content/docs/agent/caching/index.mdx Co-authored-by: Theron Voran <tvoran@users.noreply.github.com> * Update website/content/docs/agent/caching/persistent-caches/kubernetes.mdx Co-authored-by: Theron Voran <tvoran@users.noreply.github.com> * Update index.mdx * Update website/content/docs/agent/caching/index.mdx Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com> * Update website/content/docs/agent/caching/index.mdx Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com> * Update index.mdx * Update kubernetes.mdx * Resolve conflicts Co-authored-by: Theron Voran <tvoran@users.noreply.github.com> Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
- Loading branch information
1 parent
2df57a0
commit 60f3ba9
Showing
4 changed files
with
132 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
9 changes: 9 additions & 0 deletions
9
website/content/docs/agent/caching/persistent-caches/index.mdx
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,9 @@ | ||
--- | ||
layout: docs | ||
page_title: Vault Agent Persistent Cache Types | ||
description: Persistent Cache Types for Vault Agent Caching | ||
--- | ||
|
||
# Vault Agent Persistent Cache Types | ||
|
||
Please see the sidebar for available types and their usage/configuration. |
25 changes: 25 additions & 0 deletions
25
website/content/docs/agent/caching/persistent-caches/kubernetes.mdx
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
--- | ||
layout: docs | ||
page_title: Kubernetes - Vault Agent Persistent Cache | ||
description: Kubernetes Persistent Cache for Vault Agent Caching | ||
--- | ||
|
||
# Vault Agent Kubernetes Persistent Cache | ||
|
||
When `kubernetes` is configured for the persistent cache type, Vault Agent will optimize the | ||
persistent cache specifically for Kubernetes. This type of persistent cache requires a Kubernetes | ||
service account token. The service account token is used during encryption and decryption of the | ||
persistent cache as an additional integrity check. | ||
|
||
The Vault Agent persistent cache file in Kubernetes should only be used for handing off Vault tokens | ||
and leases between initialization and sidecar Vault Agent containers. This cache file should be shared | ||
using a memory volume between the Vault Agent containers. | ||
|
||
If the Vault Agent Injector for Kubernetes is being used, the persistent cache is automatically configured | ||
and used if the annotation [`vault.hashicorp.com/agent-cache-enable: true`](/docs/platform/k8s/injector/annotations#vault-hashicorp-com-agent-cache-enable) is set. | ||
|
||
## Configuration | ||
|
||
- `service_account_token_file` `(string: optional)` - When type is set to `kubernetes`, | ||
this configures the path on disk where the Kubernetes service account token can be found. | ||
Defaults to `/var/run/secrets/kubernetes.io/serviceaccount/token`. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters