Shim service allowing authenticating a Nomad session using Vault
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
IamTheFij 60963ef69d
continuous-integration/drone/push Build is passing Details
Handle failed login
3 months ago
.drone.yml WIP: Initial WIP 5 months ago
.gitignore Initial commit 5 months ago
Dockerfile Fix incorrect port 5 months ago
LICENSE Initial commit 5 months ago
README.md Update instructions 5 months ago
main.py Handle failed login 3 months ago
requirements.txt Support hvac 1.0.0 3 months ago

README.md

nomad-vault-login

Shim service allowing authenticating a Nomad session using Vault

This service would runs along side Nomad and Vault and proxied on the same hostname so it can write to localstorage. It then provides a form to allow authentication with Vault and then will retrieve the token and store that in the browser for Nomad to use.

Instructions

You can configure the service through environment variables.

  • BIND_HOST: Host to bind the server on. Defaults to 0.0.0.0.
  • BIND_PORT: Port to bind the server on. Defaults to 5000.
  • VAULT_ADDR: Address where we can find Vault. Defaults to http://127.0.0.1:8200.
  • NOMAD_ROLE: Default Nomad role to request from Vault. Defaults to admin.

Example Caddyfile

nomad.example.com {
  reverse_proxy /login localhost:5000
  reverse_proxy localhost:4646
}