Skip to main content

UDS connection

When Secret Agent listens on a UDS path, the configuration file snippet looks similar to the following:

socket-path: /var/run/aerospike/secret-agent.sock

The socket path is the path on which Secret Agent listens for connections. The path must be readable and writable by the Secret Agent process and also by the client.

When Secret Agent starts listening on the specified path, it creates a socket file. If the socket file already exists, Secret Agent deletes it and creates a new one. The new file is created with the default permissions of 660 (readable and writable by the owner and group). Secret Agent sets the user and group ownership of the socket file to the user and group ownership of the Secret Agent process.

The socket file is deleted when Secret Agent stops gracefully.