WIP

2026-01-19 21:00:14 +03:00
parent afa115e17a
commit 2cd03478f9
9 changed files with 85 additions and 16 deletions
--- a/ansible/roles/consul/templates/config.json
+++ b/ansible/roles/consul/templates/config.json
@@ -23,6 +23,18 @@
  "performance": {
    "raft_multiplier": 1
  },
+  "acl": {
+    "enabled": true,
+{% if not consul_acl_bootstraped %}
+    "default_policy": "allow",
+{% else %}
+    "default_policy": "deny",
+    "tokens": {
+      "agent": "FIXME"
+    },
+{% endif %}
+    "down_policy": "extend-cache"
+  },
 {% endif %}
  "retry_join": ["{{ consul_servers | join('", "') }}"]
 }