nomad

HCL and Docker files for Nomad deployments
git clone https://git.in0rdr.ch/nomad.git
Log | Files | Refs | Pull requests

vault-jwt-snapshot.json (517B)

      1 {
      2   "role_type": "jwt",
      3   "bound_audiences": ["vault.in0rdr.ch"],
      4   "bound_claims_type": "glob",
      5   "bound_claims": {
      6     "nomad_job_id": "snapshot/dispatch-*",
      7     "nomad_namespace": "infra",
      8     "nomad_task": "snapshot-save"
      9   },
     10   "user_claim": "nomad_job_id",
     11   "claim_mappings": {
     12     "nomad_namespace": "nomad_namespace",
     13     "nomad_job_id": "nomad_job_id",
     14     "nomad_task": "nomad_task"
     15   },
     16   "token_type": "service",
     17   "token_policies": ["snapshot"],
     18   "token_period": "10m",
     19   "token_explicit_max_ttl": 0
     20 }