This will start a concourse server right up, including vault and vault preconfigured
docker-compose up
now install the cli
brew cask install fly
now login with the cli against our local server
fly -t lite login -c http://172.31.31.254:8080 -u concourse -p changeme
# update fly
update fly
fly -t lite sync
Adjustments can be done by editing the .env file
You can access the webui with the user concourseand passwordchangeme`
http://localhost:8080
push a pipeline to the main team / pipeline from ci/pipline.yml
fly sp -t lite configure -c ci/pipline.yml -p main --load-vars-from ../credentials.yml -n
fly -t lite intercept -j <pipelinename>/<jobname>
so for example, assuming we have a job in pipeline main named builder-image-build
fly -t lite intercept -j main/builder-image-build
To adjust your vault or putting value into it, you should use the configurator container, which has the ability to talk to it and set new values. Its pretty easy, just do
connect into the container
docker-compose exec config bash
load credentials and server config
source /vault/server/init_vars
set a value of your desire
vault write secret/concourse/test value=test
since the above is all done using the server token, you can try the client token too
docker-compose exec config bash
export VAULT_CLIENT_CERT=/vault/concourse/cert.pem
export VAULT_CLIENT_KEY=/vault/concourse/key.pem
export VAULT_ADDR=https://vault:8200
export VAULT_CACERT=/vault/concourse/server.crt
vault auth -method=cert
vault read secret/concourse/main/main/myvalue
start the stack and login
docker-compose up
fly -t lite login -c http://172.31.31.254:8080 -u concourse -p changeme
create our test-value in the vault
docker-compose exec config bash -l -c 'source /vault/server/init_vars && vault write secret/concourse/main/main/myvalue value=foo'
add the pipeline to our concourse
# deploy the pipline
fly sp -t lite configure -c examples/vault-based/pipeline.yml -p main -n
# unpause the pipeline
fly -t lite unpause-pipeline -p main
# trigger the job and watch the logs
fly -t lite trigger-job -j main/test-vault -w
You should see a echo foo` in the logs
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent