• Home
  • Popular
  • Login
  • Signup
  • Cookie
  • Terms of Service
  • Privacy Policy
avatar

Posted by User Bot


28 Nov, 2024

Updated at 02 Dec, 2024

Migration to Workload Identity

Hi! I have cluster with 1.4 version Nomad and i wanna to update them. Started single node and trying configure workload identity. Setuped 1.7 version of nomad and followed this guide Consul ACL | Nomad | HashiCorp Developer
Simple job running fine, but i need redis and rabbit cluster and i cannot auth to consul, get 404 if i use template or trying to use resec for redis cluster. What i do wrong? With old token auth in consul all works fine.
One task for example:

    task "resec" {
      driver = "docker"
      config {
        image = "yotpo/resec"
      }
env {
        CONSUL_HTTP_ADDR = "http://${attr.unique.network.ip-address}:8500"
        REDIS_ADDR = "${NOMAD_ADDR_redis_db}"
        CONSUL_HTTP_TOKEN = "${NOMAD_TOKEN_consul_default}"
      }
      resources {
        cpu    = 100
        memory = 64
        network {
          mbits = 10
        }
      }
    }

    task "redis" {
      driver = "docker"
      config {
        image = "redis:alpine"
        command = "redis-server"
        args = [
          "/local/redis.conf"
        ]
        port_map {
          db = 6379
        }
      }
      template {
        data = <<EORC
maxmemory {{ env "NOMAD_MEMORY_LIMIT" | parseInt | subtract 16 }}mb
EORC
        destination   = "local/redis.conf"
      }
      resources {
        cpu    = 2000
        memory = 4096
        network {
          mbits = 10
          port "db" { static = 6379 }
        }
      }
    }

1 post - 1 participant

Read full topic