infra/terraform/vault
Raito Bezarius e02af55beb feat(services/ofborg): add client mTLS for RabbitMQ via Vault
This adds the counterpart of the mTLS for RabbitMQ connections.

This required:

- an update in OfBorg
- some trick to have a PKCS#12 container
- move to a binary-specific runtime directory

And this is not even done due to OfBorg sending auth mechanism = PLAIN
instead of EXTERNAL. I did not figure out yet how to send the right
thing.

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2025-01-02 18:39:43 +01:00
..
default.nix feat(services/ofborg): add client mTLS for RabbitMQ via Vault 2025-01-02 18:39:43 +01:00
generic.nix feat(terraform/vault): support for tokens generation 2025-01-02 18:37:24 +01:00
ica1.nix feat(terraform/vault/pki): init 2024-12-30 17:22:25 +01:00
ica2.nix feat(terraform): support declarative subCAs and their Vault policies 2025-01-01 01:54:37 +01:00
pki.nix feat(terraform/vault/pki): init 2024-12-30 17:22:25 +01:00
policy-options.nix feat(terraform): support declarative subCAs and their Vault policies 2025-01-01 01:54:37 +01:00
policy.nix feat(terraform): support declarative subCAs and their Vault policies 2025-01-01 01:54:37 +01:00
role-options.nix feat(terraform/vault): add RabbitMQ server role 2025-01-02 18:39:43 +01:00
sub-ca-options.nix fix(terraform/vault/sub-ca): policy path calculation requires path resource IDs 2025-01-02 18:39:43 +01:00
sub-ca.nix fix(terraform/vault/sub-ca): policy path calculation requires path resource IDs 2025-01-02 18:39:43 +01:00
tokens.nix feat(terraform/vault): support for tokens generation 2025-01-02 18:37:24 +01:00