concourse/integration/creds/overrides/vault.yml

28 lines
728 B
YAML

version: '3'
services:
web:
volumes:
- ../hack/vault/certs:/vault-certs
environment:
CONCOURSE_VAULT_URL: https://vault:8200
CONCOURSE_VAULT_AUTH_BACKEND: cert
CONCOURSE_VAULT_CA_CERT: /vault-certs/vault-ca.crt
CONCOURSE_VAULT_CLIENT_CERT: /vault-certs/concourse.crt
CONCOURSE_VAULT_CLIENT_KEY: /vault-certs/concourse.key
vault:
image: vault
cap_add: [IPC_LOCK]
ports: [8200]
volumes:
- ../hack/vault/certs:/vault/certs
- ../hack/vault/config:/vault/config
command: server
environment:
# for running the 'vault' CLI
VAULT_CACERT: /vault/certs/vault-ca.crt
# sane default for 'vault' command run by tests
VAULT_FORMAT: json