Make fail_hard configurable from vault_hiera_hash

southalc / vault

Puppet module for use with Hashicorp Vault

8 stars 8 forks source link

Make fail_hard configurable from vault_hiera_hash #11

Closed gibbs closed 2 years ago

gibbs commented 2 years ago

A minor change to support overriding connection['fail_hard'] from Hiera. In some scenarios, it is desirable to fail a Puppet run when the secret backend is down, or the vault is sealed.

A better approach might be to support hard failures for specific status codes https://www.vaultproject.io/api-docs#http-status-codes

southalc commented 2 years ago

Thanks for the feedback. I've merged this request and released a new version on forge.