Update SPIFFE secrets engine docs - #3086
Conversation
Vercel Previews Deployed
|
Broken Link CheckerThis PR contains broken links, but won't be blocked. Use this report to improve content quality: Quick Actions
Need Help?
Internal LinksExternal Links |
|
|
||
| Grafana requires HTTPS for `jwk_set_url`. This step allows you to start | ||
| Grafana by providing the file directly. In a production environment, you would | ||
| do this over a TLS connection directly to Vault. |
There was a problem hiding this comment.
You could use vault server's -dev-tls option to make this more realistic.
There was a problem hiding this comment.
I considered it, but its an example, not meant to mimic production deployments (otherwise the consumer/grafana approach is also severely limited). Was enough extra steps to set the get/set the cert from the container (which then lead me to thinking of dropping the container but it works as written). The outcome is to show Vault mints a SVID, and the SVID is usable. IMO this flow does this.
There was a problem hiding this comment.
Sure, I thought it would make the example simpler, if it doesn't that's fine.
Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2 participants
Description
🎫 SPE-1588
Requested review scope:
Review urgency:
All updates:
I have:
labelapplied (hcp+product name)