{"id":21611711,"url":"https://github.com/ktsstudio/yamlvault","last_synced_at":"2025-04-11T05:34:25.118Z","repository":{"id":86391567,"uuid":"468481198","full_name":"ktsstudio/yamlvault","owner":"ktsstudio","description":"Get Vault values to YAML documents","archived":false,"fork":false,"pushed_at":"2022-04-02T15:06:03.000Z","size":43,"stargazers_count":7,"open_issues_count":0,"forks_count":2,"subscribers_count":5,"default_branch":"main","last_synced_at":"2025-03-25T03:34:44.417Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ktsstudio.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-03-10T19:20:47.000Z","updated_at":"2025-03-12T09:46:11.000Z","dependencies_parsed_at":null,"dependency_job_id":"62adff0a-a4b0-4de0-af13-d1617b92d6ec","html_url":"https://github.com/ktsstudio/yamlvault","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ktsstudio%2Fyamlvault","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ktsstudio%2Fyamlvault/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ktsstudio%2Fyamlvault/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ktsstudio%2Fyamlvault/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ktsstudio","download_url":"https://codeload.github.com/ktsstudio/yamlvault/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248348107,"owners_count":21088809,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-24T21:13:38.726Z","updated_at":"2025-04-11T05:34:25.081Z","avatar_url":"https://github.com/ktsstudio.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# yamlvault\n\nUtility to transform yaml document containing references to secrets in\nHashiCorp Vault by their respective values and generate a new yaml document.\n\nPossible usages include transforming of Helm values.\n\n## Syntax\n\nIf you want a value to be replaced it must be of the following format:\n\n```yaml\nkey: vault:\u003cvault_path\u003e:\u003cvault_key\u003e\n```\n\nIt also can be an array element:\n```yaml\nsome_array_key:\n  - value1\n  - vault:\u003cvault_path\u003e:\u003cvault_key\u003e\n  - value3\n```\n\nwhere `vault_path` is the path where secret can be fetched and `vault_key` - \nkey in the Vault secret \n\n## Usage\n\n\n\n### Decrypt\n```text\nUsage:\n  yamlvault decrypt [flags]\n\nFlags:\n  -h, --help            help for decrypt\n  -i, --input string    Input file (default \"-\")\n  -o, --output string   Output file (default \"-\")\n```\n\nvalues.yaml:\n```yaml\nenv:\n  POSTGRES_USER: vault:/secret/data/myapp/pg:username\n  POSTGRES_PASSWORD: vault:/secret/data/myapp/pg:password\n  POSTGRES_DATABASE: vault:/secret/data/myapp/pg:db\n  \n  MONGO_USER: vault:/mongodb/creds/mymongo:username\n  MONGO_PASSWORD: vault:/mongodb/creds/mymongo:password\n```\n\nCommand:\n```bash\n% export VAULT_TOKEN=\"your-vault-token\"\n$ yamlvault decrypt --input ./vaules.yaml --output ./values.yaml.dec  \n```\n\nYou can also read directly from stdin and write to stdout (which is actually a default behaviour):\n```bash\n$ cat values.yaml | yamlvault decrypt \u003e values.yaml.dec\n```\n\nvalues.yaml.dec:\n```yaml\nenv:\n  POSTGRES_USER: myapp_user\n  POSTGRES_PASSWORD: superpaswword\n  POSTGRES_DATABASE: myapp\n\n  MONGO_USER: v-approle-mymongo-we1PN0hdcx3JcLT-16489110\n  MONGO_PASSWORD: E-OrMjjgln...\n```\n\nAs you can see you can also use dynamic secrets (`MONGO_USER` \u0026 `MONGO_PASSWORD`)\n\n## Docker\n\nAlso available as a docker image:\n\n```bash\n$ docker run ktshub/yamlvault \n```","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fktsstudio%2Fyamlvault","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fktsstudio%2Fyamlvault","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fktsstudio%2Fyamlvault/lists"}