Notes

consul acl policy create -name "ui-policy" -rules @ui.hcl -token "a3963e8e-a031-efac-b906-1dd56d9daabb"

consul acl token create -description "Token for UI" -policy-name ui-policy -token "a3963e8e-a031-efac-b906-1dd56d9daabb"

consul acl policy create -name consul-servers -rules @server.hcl -token "a3963e8e-a031-efac-b906-1dd56d9daabb"
consul acl token create -description "Token for Consul Servers" -policy-name consul-servers -token "a3963e8e-a031-efac-b906-1dd56d9daabb"


consul acl set-agent-token agent "7c9ddc24-8350-d595-d64d-582fe15b806c"

consul acl policy create -name "dns-requests" -rules @dns.hcl -token "a3963e8e-a031-efac-b906-1dd56d9daabb"
consul acl token create -description "Token for DNS Requests" -policy-name dns-requests -token "a3963e8e-a031-efac-b906-1dd56d9daabb"


consul acl set-agent-token default "64566ca7-5231-2973-ba2d-712fb04ba81d" - ne otrabotalo!!!
Propisivau server.hcl kak agent token. a dns-requests kak default token v consul.hcl >> restart consul na vseh serverah!



Archive logs every day:
#/bin/bash

cd /var/log/consul && tar czf consul_logs_$(date +"%Y-%m-%d").tgz ./*.log --remove-files

crontab every day 2:30 AM


consul acl policy create -name "services-nodes" -rules @services-nodes.hcl -token "a3963e8e-a031-efac-b906-1dd56d9daabb"
consul acl token create -description "Token for services ms-tk and nodes ms-nodes" -policy-name services-nodes -token "a3963e8e-a031-efac-b906-1dd56d9daabb"



consul acl policy create -name "kv" -rules @kv.hcl -token "a3963e8e-a031-efac-b906-1dd56d9daabb"
consul acl token create -description "Token for kv" -policy-name kv -token "a3963e8e-a031-efac-b906-1dd56d9daabb"




[tukhtaev@ms-node5 acls]$ cat policies/dns.hcl
node_prefix "" {
policy = "read"
}
service_prefix "" {
policy = "read"
}
# only needed if using prepared queries
query_prefix "" {
policy = "read"
}

[tukhtaev@ms-node5 acls]$ cat policies/server.hcl
node "ms-node3" {
policy = "write"
}
node "ms-node4" {
policy = "write"
}
node "ms-node5" {
policy = "write"
}


node_prefix "" {
policy = "write"
}
service_prefix "" {
policy = "write"
}
# only needed if using prepared queries
query_prefix "" {
policy = "write"
}

[tukhtaev@ms-node5 acls]$ cat policies/ui.hcl
service_prefix "" {
policy = "read"
}
key_prefix "" {
policy = "read"
}
node_prefix "" {
policy = "read"
}


## service-nodes.hcl

service_prefix "ms-tk" {
policy = "write"
}
node_prefix "ms-node" {
policy = "write"
}
service "" {
policy = "read"
}


kv.hcl

key_prefix "" {
policy = "write"
}