Open nosammai opened 9 months ago
Ran into this issue as well.
What I ended up doing, was setting a Hiera value of %{facts.networking.fqdn}.someLettersHereForSalt'
and passed that into fqdn_uuid() as the secret_id
for the token. This allowed me to encrypt just 1 value that would dynamically change based on server.
This way I could just set the agent token to the same lookup value and have things work while staying encrypted.
Using the provided example code to generate consul tokens for each host, there doesn't seem to be a way in puppet to access the randomly generated secret_id of the tokens for use in config files/etc. I would rather not have to pre-generate tokens and store in encrypted hiera for thousands of hosts.
I see someone else asked a similar question a while back #472 that didn't get answered.
What is the correct way to access the secret_id of a token created by a consul_token resource?
How to reproduce (e.g Puppet code you use)
What are you seeing
What behaviour did you expect instead