To choose my own acl_token_master `consul boostrap acl`

Consul
,
1

Hi

Is there anyway to run consul acl boostrap by setting the acl master token instead of letting consul generate a new one ?

I tried both the following commands, but none of them works. A new secret ID is generated and my token does not work.

consul acl bootstrap -token=xxxxx

and

export CONSUL_HTTP_TOKEN=xxxx
consul acl bootstrap

My goal is to create the acl master token out of consul, so I can add it to a kubernetes secret and set it as environment variable in my consul pod.

2

Even if this would be possible it should be an option using -dev. :slightly_smiling_face:

3

What’s wrong with that ?
It’s already possible to set the acl master token in the config file :

          tokens {
               master = "xxxxxxxx"
          }
4

Misunderstanding. :smile:

1 Like
5

@yakhyadabo the only way to predefine the token is to set it in config via

tokens {
  master = ...
}

As you posted above.

6

I write the following script to make it work :

sed -i 's/\"master\":.*/\"master\": \"'$CONSUL_HTTP_MASTER_TOKEN'\",/g' config.json
sed -i 's/\"agent\":.*/\"agent\": \"'$CONSUL_HTTP_TOKEN'\"/g' config.json

export CONSUL_HTTP_ADDR=https://localhost:8501

consul agent -advertise...

Thanks