Getting Started with HashiCorp Nomad - Demo - Secure Nomad with TLS

This video tutorial focuses on securing a Nomad environment by adding certificates, keys, and CA certs to the Nomad server. It demonstrates using Hashicorp Vault to create certificates and configure Nomad to use them. The tutorial also covers ensuring server trust and verifying the configuration to ensure Nomad operates securely with TLS. The process is shown manually to help understand the steps before automating them.

What is the primary focus of the lab discussed in the video?

• Installing Nomad

• Creating a Nomad cluster

• Securing the Nomad environment

• Managing Nomad services

Which tool is used for creating certificates in the lab?

• Certbot

• Hashicorp Vault

• Let's Encrypt

• OpenSSL

What is the purpose of the PKI secrets engine in Hashicorp Vault?

• To store passwords

• To generate certificates

• To encrypt data

• To manage user access

Where are the certificates stored on the Nomad server?

• /etc/nomad

• /var/lib/nomad

• /usr/local/nomad

• /etc/certs

What command is used to change the ownership of the certificate files?

• sudo chattr

• sudo chgrp

• sudo chown

• sudo chmod

Why is it important for the Nomad user to own the certificate files?

• To prevent unauthorized access

• To allow Nomad to read the keys

• To ensure the files are executable

• To enable file sharing

What must be done to ensure the server trusts the CA?

• Restart the server

• Reinstall Nomad

• Update the server's trust store

• Install a new CA

What change is made to the Nomad configuration file to enable TLS?

• Set HTTP and RPC to true

• Set HTTP and RPC to false

• Add a new certificate

• Remove the TLS section

What indicates that Nomad is now listening on HTTPS?

• A successful HTTP request

• An error message about HTTP

• A log entry in Nomad

• A change in server status

What is the next step after securing the cluster with TLS?

• Secure gossip encryption

• Add more certificates

• Install new nodes

• Upgrade Nomad version