You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently the envoy bootstrap task runner hook directly uses the value from the agent's consul.addressparameter for passing into the invocation of consul connect envoy -boostrap-http-addrflag. This value is used by the invoked Consul CLI to communicate with the specified Consul agent for generating the envoy bootstrap config. We are not respecting the TLS/auth config options, which I think we can pass through using environment variables when doing the exec consul
Fixes#6594#6711#6714#7567
e2e testing is still TBD in #6502
Before, we only passed the Nomad agent's configured Consul HTTP
address onto the `consul connect envoy ...` bootstrap command.
This meant any Consul setup with TLS enabled would not work with
Nomad's Connect integration.
This change now sets CLI args and Environment Variables for
configuring TLS options for communicating with Consul when doing
the envoy bootstrap, as described in
https://www.consul.io/docs/commands/connect/envoy.html#usage
I'm going to lock this issue because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.
Currently the envoy bootstrap task runner hook directly uses the value from the agent's
consul.address
parameter for passing into the invocation ofconsul connect envoy -boostrap
-http-addr
flag. This value is used by the invoked Consul CLI to communicate with the specified Consul agent for generating the envoy bootstrap config. We are not respecting the TLS/auth config options, which I think we can pass through using environment variables when doing theexec consul
CONSUL_HTTP_AUTH
https://www.consul.io/docs/commands/index.html#consul_http_authCONSUL_CACERT
https://www.consul.io/docs/commands/index.html#consul_cacertCONSUL_CLIENT_CERT
https://www.consul.io/docs/commands/index.html#consul_client_certCONSUL_CLIENT_KEY
https://www.consul.io/docs/commands/index.html#consul_client_keyCONSUL_HTTP_SSL
https://www.consul.io/docs/commands/index.html#consul_http_sslThe text was updated successfully, but these errors were encountered: