Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add write support for vaultkv secrets #958

Closed
wants to merge 8 commits into from

Conversation

MatteoVoges
Copy link
Contributor

@MatteoVoges MatteoVoges commented Feb 28, 2023

Fixes issue #786, #854

Proposed Changes

  • Support writing vaultkv secrets with kapitan (refs with inventory and cli)
  • New Interfaces for VaultClient and VaultServer to simplify authentication and testing a bit and reduce code redundancy.
  • Update hvac to version 1.0.2 and replace depricated api functions

Examples

  • ref-tag-pattern: ?{vaultkv:path/to/ref:mount_in_vault:path/in/vault:key||random:str}
  • If some of the fields are not specified then following defaults get chosen:
    • e.g. tag ?{vaultkv:path/to/ref:::key||random:str} would create / lookup a secret with
      • mount=secret and
      • path/in/vault=path/to/ref

CLI

Use kapitan refs --write vaultkv:test/secret -f test/secret/file --refs-path refs/path --vault-mount testmount --vault-path test/path --vault-key testkey to write your secret stored in test/secret/file to kapitan ref engine.

Replaced / Outdated Pull-Requests:


Contributed by

@MatteoVoges MatteoVoges linked an issue Apr 4, 2023 that may be closed by this pull request
@MatteoVoges MatteoVoges self-assigned this Apr 4, 2023
@MatteoVoges MatteoVoges linked an issue Apr 4, 2023 that may be closed by this pull request
@MatteoVoges MatteoVoges requested a review from ramaro April 4, 2023 09:45
@MatteoVoges MatteoVoges added enhancement enhancement to an existing feature feature labels Apr 20, 2023
@MatteoVoges MatteoVoges closed this Oct 4, 2023
@MatteoVoges MatteoVoges deleted the overhaul-vault-pr branch October 30, 2023 17:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement enhancement to an existing feature feature
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Update hvac dept to 1.x [SecretEngine][Vault] Extend ability to write, generate
1 participant