diff --git a/bitnami/consul/README.md b/bitnami/consul/README.md index 9d603f14f2..1d6ca8877a 100644 --- a/bitnami/consul/README.md +++ b/bitnami/consul/README.md @@ -96,7 +96,7 @@ helm delete --purge my-release | `datacenterName` | Datacenter name for Consul. If not supplied, will use the Consul | `dc1` | | `domain` | Consul domain name | `consul` | | `raftMultiplier` | Multiplier used to scale key Raft timing parameters | `1` | -| `gossipKey` | Gossip key for all members. The key must be 16-bytes, can be generated with $(consul keygen) | `""` | +| `gossipKey` | Gossip key for all members. The key must be base64-encoded, can be generated with $(consul keygen) | `""` | | `tlsEncryptionSecretName` | Name of existing secret with TLS encryption data | `""` | | `hostAliases` | Deployment pod host aliases | `[]` | | `configuration` | HashiCorp Consul configuration to be injected as ConfigMap | `""` | diff --git a/bitnami/consul/templates/statefulset.yaml b/bitnami/consul/templates/statefulset.yaml index e2f142988a..7f9afa6620 100644 --- a/bitnami/consul/templates/statefulset.yaml +++ b/bitnami/consul/templates/statefulset.yaml @@ -154,6 +154,8 @@ spec: - name: CONSUL_DATACENTER value: {{ .Values.datacenterName | quote }} {{- if .Values.gossipKey }} + - name: CONSUL_GOSSIP_ENCRYPTION + value: "yes" - name: CONSUL_GOSSIP_ENCRYPTION_KEY valueFrom: secretKeyRef: diff --git a/bitnami/consul/values.yaml b/bitnami/consul/values.yaml index 1d44b86549..83f11e6572 100644 --- a/bitnami/consul/values.yaml +++ b/bitnami/consul/values.yaml @@ -103,9 +103,9 @@ domain: consul ## @param raftMultiplier Multiplier used to scale key Raft timing parameters ## raftMultiplier: "1" -## @param gossipKey Gossip key for all members. The key must be 16-bytes, can be generated with $(consul keygen) +## @param gossipKey Gossip key for all members. The key must be base64-encoded, can be generated with $(consul keygen) ## Example: -## gossipKey: 887Syd/BOvbtvRAKviazMg== +## gossipKey: "DVoLa/k99hfBEdIfCLkzSpWg4obElLYVIFDsutKCL/w=" ## gossipKey: "" ## @param tlsEncryptionSecretName Name of existing secret with TLS encryption data