Get mysql root from vault

This commit is contained in:
IamTheFij 2022-07-25 15:51:41 -07:00
parent b300c220b6
commit a8fe9bfff8

View File

@ -56,6 +56,18 @@ job "mysql-server" {
task "mysql-server" { task "mysql-server" {
driver = "docker" driver = "docker"
config {
image = "mysql:8"
ports = ["db"]
}
vault {
policies = [
"access-tables",
"nomad-task",
]
}
volume_mount { volume_mount {
volume = "mysql-data" volume = "mysql-data"
destination = "/var/lib/mysql" destination = "/var/lib/mysql"
@ -63,14 +75,18 @@ job "mysql-server" {
} }
env = { env = {
"MYSQL_ROOT_PASSWORD" = "supersecretpassword"
# Allow connections from any host # Allow connections from any host
"MYSQL_ROOT_HOST" = "%" "MYSQL_ROOT_HOST" = "%"
} }
config { template {
image = "mysql:8" data = <<EOH
ports = ["db"] {{ with secret "kv/data/mysql" }}
MYSQL_ROOT_PASSWORD={{ Data.data.root_password }}
{{ end }}
EOH
destination = "secrets/db.env"
env = true
} }
resources { resources {