Skip to content

Set up old vault connection

  1. Install the vault cli from attracs-linux-playbooks:
    ansible-playbook -l <instance-name> vault_agent/vault_agent_install.yml 
    
  2. Add the vault-agent.attracs.com supervisor application to the list of applications for the server:
    {
      "includes": [
        "/etc/attracs-supervisor/vault-agent.conf",
        ...
    }
    
  3. Add the server's IP address to the cloud armor rule vault-internal-policy in the attracs-devops project:
    1. https://console.cloud.google.com/net-security/securitypolicies/details/vault-internal-policy?project=attracs-devops&inv=1&invt=AbqE1w&tab=rules
  4. Run attracs-linux-playbooks/vault_agent_config.yml ansible-playbook to get get secrets for the server:
    ansible-playbook --limit <instance-name> vault_agent/vault_agent_config.yml --vault-password-file=.vault_password_file
    
    1. You should see a list of secrets that were downloaded in the #vault -channel in Slack:
      1. Example: adi-core-confidential-instance-stable-1: /etc/attracs-ci/attracs.json rendered and changed