Closed kenjones-cisco closed 8 years ago
Mounting consul
:
-d '{"type":"consul"}' /sys/mounts/consul-prd
APIs available at /v1/consul-prd/*
instead of default /v1/consul/*
Enabling app-id
:
-d '{"type":"app-id"}' /sys/auth/local-appid
APIs available at /v1/auth/local-appid/*
instead of default /v1/auth/app-id/*
The pattern of defining APIs/Endpoints in a file works well for fixed Endpoints. But for the different Secret backends and the Auth Backends, the actual Endpoint is going to vary based on how those are mounted.
For example, if the operator of the Vault mounts a
consul
type secret backend toconsul-prd
, then attempting to use the Consul Endpoints located at the fixed location/v1/consul/*
will result in many404
type errors.As a result the pattern for doing Endpoints will need to be redesigned.