Company
Date Published
Author
Rob Barnes
Word count
1297
Language
English
Hacker News points
None

Summary

HashiCorp Nomad is being used to run Boundary workers as dynamic workloads, utilizing the custom Boundary secrets engine for Vault to generate worker activation tokens and manage their lifecycle. The integration with Nomad and Vault allows for seamless automation of this process. To achieve this, a custom Vault plugin is required, which enables the retrieval of secrets from Vault and rendering them to a file using Nomad's templating capabilities. A Nomad job file is then created, which includes a Vault stanza specifying the policy to use when retrieving the activation token, as well as a template that populates the configuration parameter with the retrieved token. The final Nomad job file is complete and ready for deployment, allowing for the creation of a worker in Nomad to authenticate with the HCP Boundary controller.