|
21 | 21 |
|
22 | 22 | ### <a name="vault"></a>`vault`
|
23 | 23 |
|
24 |
| -install hashicorp vault |
| 24 | +Agent specific parameters |
25 | 25 |
|
26 | 26 | #### Parameters
|
27 | 27 |
|
@@ -249,215 +249,215 @@ Default value: `'1.12.0'`
|
249 | 249 |
|
250 | 250 | Data type: `Enum['server', 'agent']`
|
251 | 251 |
|
252 |
| -start vault in server or agent mode |
| 252 | +Whether to start vault in 'server' or 'agent' mode |
253 | 253 |
|
254 | 254 | Default value: `'server'`
|
255 | 255 |
|
256 | 256 | ##### <a name="-vault--extra_config"></a>`extra_config`
|
257 | 257 |
|
258 | 258 | Data type: `Hash`
|
259 | 259 |
|
260 |
| - |
| 260 | +Hash containing extra configuration options to merge with the generated config |
261 | 261 |
|
262 | 262 | Default value: `{}`
|
263 | 263 |
|
264 | 264 | ##### <a name="-vault--enable_ui"></a>`enable_ui`
|
265 | 265 |
|
266 | 266 | Data type: `Optional[Boolean]`
|
267 | 267 |
|
268 |
| - |
| 268 | +Whether to enable the Vault web UI |
269 | 269 |
|
270 | 270 | Default value: `undef`
|
271 | 271 |
|
272 | 272 | ##### <a name="-vault--arch"></a>`arch`
|
273 | 273 |
|
274 | 274 | Data type: `Any`
|
275 | 275 |
|
276 |
| - |
| 276 | +System architecture for the Vault binary (automatically determined) |
277 | 277 |
|
278 | 278 | Default value: `$vault::params::arch`
|
279 | 279 |
|
280 | 280 | ##### <a name="-vault--os"></a>`os`
|
281 | 281 |
|
282 | 282 | Data type: `Any`
|
283 | 283 |
|
284 |
| - |
| 284 | +Operating system for the Vault binary (automatically determined) |
285 | 285 |
|
286 | 286 | Default value: `downcase($facts['kernel'])`
|
287 | 287 |
|
288 | 288 | ##### <a name="-vault--manage_download_dir"></a>`manage_download_dir`
|
289 | 289 |
|
290 | 290 | Data type: `Any`
|
291 | 291 |
|
292 |
| - |
| 292 | +Whether to manage the download directory |
293 | 293 |
|
294 | 294 | Default value: `false`
|
295 | 295 |
|
296 | 296 | ##### <a name="-vault--download_dir"></a>`download_dir`
|
297 | 297 |
|
298 | 298 | Data type: `Any`
|
299 | 299 |
|
300 |
| - |
| 300 | +Directory where the Vault archive will be downloaded |
301 | 301 |
|
302 | 302 | Default value: `'/tmp'`
|
303 | 303 |
|
304 | 304 | ##### <a name="-vault--package_ensure"></a>`package_ensure`
|
305 | 305 |
|
306 | 306 | Data type: `Any`
|
307 | 307 |
|
308 |
| - |
| 308 | +The state the package should be in (installed, absent, latest) |
309 | 309 |
|
310 | 310 | Default value: `'installed'`
|
311 | 311 |
|
312 | 312 | ##### <a name="-vault--package_name"></a>`package_name`
|
313 | 313 |
|
314 | 314 | Data type: `Any`
|
315 | 315 |
|
316 |
| - |
| 316 | +Name of the Vault package |
317 | 317 |
|
318 | 318 | Default value: `'vault'`
|
319 | 319 |
|
320 | 320 | ##### <a name="-vault--install_method"></a>`install_method`
|
321 | 321 |
|
322 | 322 | Data type: `Any`
|
323 | 323 |
|
324 |
| - |
| 324 | +Installation method: 'archive' or 'repo' |
325 | 325 |
|
326 | 326 | Default value: `$vault::params::install_method`
|
327 | 327 |
|
328 | 328 | ##### <a name="-vault--manage_file_capabilities"></a>`manage_file_capabilities`
|
329 | 329 |
|
330 | 330 | Data type: `Any`
|
331 | 331 |
|
332 |
| - |
| 332 | +Whether to manage Linux file capabilities for vault binary |
333 | 333 |
|
334 | 334 | Default value: `undef`
|
335 | 335 |
|
336 | 336 | ##### <a name="-vault--disable_mlock"></a>`disable_mlock`
|
337 | 337 |
|
338 | 338 | Data type: `Any`
|
339 | 339 |
|
340 |
| - |
| 340 | +Whether to disable the memory lock capability |
341 | 341 |
|
342 | 342 | Default value: `undef`
|
343 | 343 |
|
344 | 344 | ##### <a name="-vault--max_lease_ttl"></a>`max_lease_ttl`
|
345 | 345 |
|
346 | 346 | Data type: `Optional[String]`
|
347 | 347 |
|
348 |
| - |
| 348 | +Specifies the maximum possible lease duration for tokens and secrets |
349 | 349 |
|
350 | 350 | Default value: `undef`
|
351 | 351 |
|
352 | 352 | ##### <a name="-vault--default_lease_ttl"></a>`default_lease_ttl`
|
353 | 353 |
|
354 | 354 | Data type: `Optional[String]`
|
355 | 355 |
|
356 |
| - |
| 356 | +Specifies the default lease duration for tokens and secrets |
357 | 357 |
|
358 | 358 | Default value: `undef`
|
359 | 359 |
|
360 | 360 | ##### <a name="-vault--telemetry"></a>`telemetry`
|
361 | 361 |
|
362 | 362 | Data type: `Optional[Hash]`
|
363 | 363 |
|
364 |
| - |
| 364 | +Hash containing Vault telemetry configuration |
365 | 365 |
|
366 | 366 | Default value: `undef`
|
367 | 367 |
|
368 | 368 | ##### <a name="-vault--disable_cache"></a>`disable_cache`
|
369 | 369 |
|
370 | 370 | Data type: `Optional[Boolean]`
|
371 | 371 |
|
372 |
| - |
| 372 | +Disable caching |
373 | 373 |
|
374 | 374 | Default value: `undef`
|
375 | 375 |
|
376 | 376 | ##### <a name="-vault--seal"></a>`seal`
|
377 | 377 |
|
378 | 378 | Data type: `Optional[Hash]`
|
379 | 379 |
|
380 |
| - |
| 380 | +Hash containing seal configuration options |
381 | 381 |
|
382 | 382 | Default value: `undef`
|
383 | 383 |
|
384 | 384 | ##### <a name="-vault--ha_storage"></a>`ha_storage`
|
385 | 385 |
|
386 | 386 | Data type: `Optional[Hash]`
|
387 | 387 |
|
388 |
| - |
| 388 | +Hash containing storage configuration for HA setup |
389 | 389 |
|
390 | 390 | Default value: `undef`
|
391 | 391 |
|
392 | 392 | ##### <a name="-vault--listener"></a>`listener`
|
393 | 393 |
|
394 | 394 | Data type: `Variant[Hash, Array[Hash]]`
|
395 | 395 |
|
396 |
| - |
| 396 | +Hash or Array of hashes containing listener configuration |
397 | 397 |
|
398 | 398 | Default value: `{ 'tcp' => { 'address' => '127.0.0.1:8200', 'tls_disable' => 1 }, }`
|
399 | 399 |
|
400 | 400 | ##### <a name="-vault--manage_storage_dir"></a>`manage_storage_dir`
|
401 | 401 |
|
402 | 402 | Data type: `Any`
|
403 | 403 |
|
404 |
| - |
| 404 | +Whether to manage the storage directory |
405 | 405 |
|
406 | 406 | Default value: `false`
|
407 | 407 |
|
408 | 408 | ##### <a name="-vault--storage"></a>`storage`
|
409 | 409 |
|
410 | 410 | Data type: `Hash`
|
411 | 411 |
|
412 |
| - |
| 412 | +Hash containing storage configuration |
413 | 413 |
|
414 | 414 | Default value: `{ 'file' => { 'path' => '/var/lib/vault' } }`
|
415 | 415 |
|
416 | 416 | ##### <a name="-vault--manage_service_file"></a>`manage_service_file`
|
417 | 417 |
|
418 | 418 | Data type: `Optional[Boolean]`
|
419 | 419 |
|
420 |
| - |
| 420 | +Whether to manage the service file |
421 | 421 |
|
422 | 422 | Default value: `$vault::params::manage_service_file`
|
423 | 423 |
|
424 | 424 | ##### <a name="-vault--service_ensure"></a>`service_ensure`
|
425 | 425 |
|
426 | 426 | Data type: `Any`
|
427 | 427 |
|
428 |
| - |
| 428 | +Desired state of the Vault service (running, stopped) |
429 | 429 |
|
430 | 430 | Default value: `'running'`
|
431 | 431 |
|
432 | 432 | ##### <a name="-vault--service_enable"></a>`service_enable`
|
433 | 433 |
|
434 | 434 | Data type: `Any`
|
435 | 435 |
|
436 |
| - |
| 436 | +Whether to enable the Vault service on boot |
437 | 437 |
|
438 | 438 | Default value: `true`
|
439 | 439 |
|
440 | 440 | ##### <a name="-vault--manage_config_file"></a>`manage_config_file`
|
441 | 441 |
|
442 | 442 | Data type: `Any`
|
443 | 443 |
|
444 |
| - |
| 444 | +Whether to manage the Vault config file |
445 | 445 |
|
446 | 446 | Default value: `true`
|
447 | 447 |
|
448 | 448 | ##### <a name="-vault--download_filename"></a>`download_filename`
|
449 | 449 |
|
450 | 450 | Data type: `Any`
|
451 | 451 |
|
452 |
| - |
| 452 | +Filename for the downloaded archive |
453 | 453 |
|
454 | 454 | Default value: `'vault.zip'`
|
455 | 455 |
|
456 | 456 | ##### <a name="-vault--manage_config_dir"></a>`manage_config_dir`
|
457 | 457 |
|
458 | 458 | Data type: `Boolean`
|
459 | 459 |
|
460 |
| -enable/disable the directory management. not required for package based installations |
| 460 | +Whether to manage the configuration directory |
461 | 461 |
|
462 | 462 | Default value: `$install_method == 'archive'`
|
463 | 463 |
|
|
0 commit comments