Support of old token and workload identities

Nomad
1

Does Nomad support both methods at the same time? The old token based and workload identities. I do have config like this

vault {
  enabled = true
  address = "VAULT_URL"
  tls_skip_verify = true
  task_token_ttl = "1h"
  create_from_role = "ROLE"
  token = "TOKEN"

  default_identity {
    aud = ["vault.io"]
    Tel = "1h"
  }
}

Ideally I would like still use old token method, and migrate job by job to workload identities
With above config, the workload identities is used, regarding config provided under nomad job.

2

Hi @svarauskas ,

Welcome to the HashiCorp Forums!

Nomad 1.10, removes the previously deprecated token based workflow. You can read the details in the release notes here Nomad version-specific upgrade guides | Nomad | HashiCorp Developer .

So if you are running Nomad >= 1.10, you can only use the workload identity workflow.