Shim service allowing authenticating a Nomad session using Vault
Go to file
Ian Fijolek 60963ef69d
All checks were successful
continuous-integration/drone/push Build is passing
Handle failed login
2022-11-15 12:59:37 -08:00
.drone.yml WIP: Initial WIP 2022-09-06 13:15:40 -07:00
.gitignore Initial commit 2022-09-06 20:06:20 +00:00
Dockerfile Fix incorrect port 2022-09-16 16:54:55 -07:00
LICENSE Initial commit 2022-09-06 20:06:20 +00:00
main.py Handle failed login 2022-11-15 12:59:37 -08:00
README.md Update instructions 2022-09-11 21:22:37 -07:00
requirements.txt Support hvac 1.0.0 2022-10-27 12:56:55 -07:00

nomad-vault-login

Shim service allowing authenticating a Nomad session using Vault

This service would runs along side Nomad and Vault and proxied on the same hostname so it can write to localstorage. It then provides a form to allow authentication with Vault and then will retrieve the token and store that in the browser for Nomad to use.

Instructions

You can configure the service through environment variables.

  • BIND_HOST: Host to bind the server on. Defaults to 0.0.0.0.
  • BIND_PORT: Port to bind the server on. Defaults to 5000.
  • VAULT_ADDR: Address where we can find Vault. Defaults to http://127.0.0.1:8200.
  • NOMAD_ROLE: Default Nomad role to request from Vault. Defaults to admin.

Example Caddyfile

nomad.example.com {
  reverse_proxy /login localhost:5000
  reverse_proxy localhost:4646
}