Migration to Workload Identity

Nomad
,
1

Hi! I have cluster with 1.4 version Nomad and i wanna to update them. Started single node and trying configure workload identity. Setuped 1.7 version of nomad and followed this guide Consul ACL | Nomad | HashiCorp Developer
Simple job running fine, but i need redis and rabbit cluster and i cannot auth to consul, get 404 if i use template or trying to use resec for redis cluster. What i do wrong? With old token auth in consul all works fine.
One task for example:

    task "resec" {
      driver = "docker"
      config {
        image = "yotpo/resec"
      }
env {
        CONSUL_HTTP_ADDR = "http://${attr.unique.network.ip-address}:8500"
        REDIS_ADDR = "${NOMAD_ADDR_redis_db}"
        CONSUL_HTTP_TOKEN = "${NOMAD_TOKEN_consul_default}"
      }
      resources {
        cpu    = 100
        memory = 64
        network {
          mbits = 10
        }
      }
    }

    task "redis" {
      driver = "docker"
      config {
        image = "redis:alpine"
        command = "redis-server"
        args = [
          "/local/redis.conf"
        ]
        port_map {
          db = 6379
        }
      }
      template {
        data = <<EORC
maxmemory {{ env "NOMAD_MEMORY_LIMIT" | parseInt | subtract 16 }}mb
EORC
        destination   = "local/redis.conf"
      }
      resources {
        cpu    = 2000
        memory = 4096
        network {
          mbits = 10
          port "db" { static = 6379 }
        }
      }
    }

Trying to add to task identity, but not help me:

      identity {
        env         = true
        file        = true
        aud         = ["consul"]
      }
1 Like