{"id":19205709,"url":"https://github.com/fairwindsops/vault-token-injector","last_synced_at":"2026-01-23T03:49:19.378Z","repository":{"id":37925277,"uuid":"364592728","full_name":"FairwindsOps/vault-token-injector","owner":"FairwindsOps","description":"A daemon to automatically inject and rotate your vault tokens in CircleCI.","archived":false,"fork":false,"pushed_at":"2024-09-27T15:15:01.000Z","size":4087,"stargazers_count":2,"open_issues_count":5,"forks_count":0,"subscribers_count":15,"default_branch":"main","last_synced_at":"2025-03-19T03:34:32.599Z","etag":null,"topics":["circleci","fairwinds-incubator","vault"],"latest_commit_sha":null,"homepage":"https://fairwinds.com","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FairwindsOps.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-05-05T13:50:57.000Z","updated_at":"2024-09-27T15:14:41.000Z","dependencies_parsed_at":"2024-06-21T01:07:25.216Z","dependency_job_id":"446b5b33-9f11-4281-b91e-e9d614d9c698","html_url":"https://github.com/FairwindsOps/vault-token-injector","commit_stats":{"total_commits":91,"total_committers":9,"mean_commits":10.11111111111111,"dds":0.6813186813186813,"last_synced_commit":"59f8b7907a7fcb73c1030c39bb25de7a0fe65d8e"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FairwindsOps%2Fvault-token-injector","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FairwindsOps%2Fvault-token-injector/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FairwindsOps%2Fvault-token-injector/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FairwindsOps%2Fvault-token-injector/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FairwindsOps","download_url":"https://codeload.github.com/FairwindsOps/vault-token-injector/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248229592,"owners_count":21068936,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["circleci","fairwinds-incubator","vault"],"created_at":"2024-11-09T13:13:41.994Z","updated_at":"2026-01-23T03:49:19.336Z","avatar_url":"https://github.com/FairwindsOps.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cdiv align=\"center\" class=\"no-border\"\u003e\n  \u003ch3\u003eAutomatic Vault Token Injector\u003c/h3\u003e\n  \u003ca href=\"https://github.com/FairwindsOps/vault-token-injector\"\u003e\n    \u003cimg src=\"https://img.shields.io/github/v/release/FairwindsOps/vault-token-injector\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://goreportcard.com/report/github.com/FairwindsOps/vault-token-injector\"\u003e\n    \u003cimg src=\"https://goreportcard.com/badge/github.com/FairwindsOps/vault-token-injector\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://circleci.com/gh/FairwindsOps/vault-token-injector.svg\"\u003e\n    \u003cimg src=\"https://circleci.com/gh/FairwindsOps/vault-token-injector.svg?style=svg\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://insights.fairwinds.com/gh/FairwindsOps/vault-token-injector\"\u003e\n    \u003cimg src=\"https://insights.fairwinds.com/v0/gh/FairwindsOps/vault-token-injector/badge.svg\"\u003e\n  \u003c/a\u003e\n\u003c/div\u003e\n\n# vault-token-injector\n\nA loop to keep vault access tokens up-to-date in circleci and/or terraform cloud\n\nInjects new tokens into circleci build environments or terraform cloud workspaces on startup and every 30 minutes. Also injects the `VAULT_ADDR` variable.\n\n# Configuration\n\nAn example configuration file is present [here](example_config.yaml). Whatever circleci projects or terraform cloud workspaces are mentioned will update the given `token_variable` in the project workspace. The vault token for that project is created with the provided `vault_role` and/or `vault_policies`. In addition, the `vault_address` field is injected as the `VAULT_ADDR` environment variable.\n\n## Token TTL and Refresh Interval\n\nThe default token TTL is 60 minutes, and the default refresh interval is 30 minutes. This allows some overlap intentionally. If you wish to customize these numbers, you can set the following in your configuration:\n\n```\ntoken_ttl: 10m\ntoken_refresh_interval: 1m\n```\n\n## Logging\n\nYou can adjust the logging level with the `-vX` flag where X can be 1-10.\n*WARNING* - Log level 10 will output secrets into the logs for debugging scenarios. Please do not do this in a production environment.\n\nNote that the time intervals are golang time.Duration strings\n\n## Future Planned Enhancements\n\n* Staggered token injections\n* Disable `VAULT_ADDR` injection\n* Use Vault API instead of vault binary\n* Prometheus endpoint to bubble up errors and successes\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffairwindsops%2Fvault-token-injector","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffairwindsops%2Fvault-token-injector","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffairwindsops%2Fvault-token-injector/lists"}