The enterprise expansion pack provides support for global environment variables, sourced from a vault server. Update your drone server configuration to include the vault connection details, including the vault server address and token.

services:
  drone-server:
    image: drone/drone:0.8

    ports:
      - 80:8000
    volumes:
      - /var/lib/drone:/var/lib/drone/
    restart: always
    environment:
+     VAULT_ADDR=https://vault.mycompany.com:8200
+     VAULT_TOKEN=adb0c2b6-246f-10b3-bd9e-c23a0982043e

Please note that you can use any of the following vault configuration parameters: https://www.vaultproject.io/docs/commands/environment.html

Token

Please note that you must provide drone with the root token at this time. We are actively working to provide support for periodic tokens and automatic token renewal in a future release.

Restricting Access

Secrets sourced from vault are restricted using key-values associated with the secret.

Please see the vault usage documentation for detailed usage instructions for creating and consuming vault secrets in your pipelines.

Is there a mistake on this page? Please let us know or edit this page.