Skip to content

Commit

Permalink
Disable mlock by default
Browse files Browse the repository at this point in the history
Signed-off-by: Shubhendu Ram Tripathi <shubhendu@minio.io>
  • Loading branch information
shtripat committed Jan 10, 2024
1 parent 88caa9c commit d70aae7
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 1 deletion.
8 changes: 7 additions & 1 deletion kesconf/testdata/vault/deploy_vault.sh
Original file line number Diff line number Diff line change
Expand Up @@ -55,24 +55,29 @@ function install_kes() {

function setup_vault() {
# Create vault certs
echo "==================================================================================="
echo "Run: kes identity new --key vault.key --cert vault.crt --ip \"127.0.0.1\" localhost"
echi ""
echo ""
kes identity new --key vault.key --cert vault.crt --ip "127.0.0.1" localhost
mkdir -p /tmp/vault/file || sudo mkdir -p /tmp/vault/file
echo ""

# Start vault server
echo "========================="
echo "Starting vault server...."
echo "Run: vault server -config \"${GITHUB_WORKSPACE}\"/kesconf/testdata/vault/vault-config.json &"
vault server -config "${GITHUB_WORKSPACE}"/kesconf/testdata/vault/vault-config.json &
ps -ef | grep vault
echo ""

# Generate certs for KES
echo "======================================================================================"
echo "Run: kes identity new --ip \"127.0.0.1\" localhost --cert public.crt --key private.key"
kes identity new --ip "127.0.0.1" localhost --cert public.crt --key private.key
echo ""

# Generate certs for client application (to be used by test)
echo "=============================================================="
echo "Run: kes identity new --key=client.key --cert=client.crt MyApp"
kes identity new --key=client.key --cert=client.crt MyApp
echo ""
Expand Down Expand Up @@ -111,6 +116,7 @@ function setup_vault() {
kes_cert="${kes_public_cert}" yq e -i '.tls.cert = strenv(kes_cert)' "${GITHUB_WORKSPACE}"/kesconf/testdata/vault/kes-config-vault.yml
vault_cert="${vault_public_cert}" yq e -i '.keystore.vault.tls.ca = strenv(vault_cert)' "${GITHUB_WORKSPACE}"/kesconf/testdata/vault/kes-config-vault.yml

echo "=============================================================================="
echo "Content of \"${GITHUB_WORKSPACE}\"/kesconf/testdata/vault/kes-config-vault.yml"
cat "${GITHUB_WORKSPACE}"/kesconf/testdata/vault/kes-config-vault.yml
echo ""
Expand Down
1 change: 1 addition & 0 deletions kesconf/testdata/vault/vault-config.json
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@

"default_lease_ttl": "168h",
"max_lease_ttl": "720h",
"disable_mlock": true,

"listener": {
"tcp": {
Expand Down

0 comments on commit d70aae7

Please sign in to comment.