SYSTEM Cited by 1 source
Consul Template¶
What it is¶
Consul Template is a HashiCorp tool that renders templates populated with data from Consul, Vault, and other sources. It watches for changes and re-renders templates automatically, commonly used for dynamic secret rotation and service discovery configuration on instances.
Role in Slack's Shipyard¶
In Shipyard's otherwise immutable instances, Consul Template is the sole exception: it dynamically refreshes secrets from Vault without requiring instance cycling. This makes Shipyard "semi-immutable" — the core system and service layers remain fixed at bake time, but credentials and certificates can be updated dynamically.
This design decision balances "stability, predictability, and security across the fleet" (Source: sources/2026-07-14-slack-shipyard-next-generation-ec2-platform).
Seen in¶
- sources/2026-07-14-slack-shipyard-next-generation-ec2-platform — the single named exception to Shipyard's immutability model for secrets rotation.