https://github.com/cryptiklemur/load-vault-config

Small script to load vault secrets into a bash-capable output
https://github.com/cryptiklemur/load-vault-config

Last synced: about 1 year ago
JSON representation

Small script to load vault secrets into a bash-capable output

• Host: GitHub
• URL: https://github.com/cryptiklemur/load-vault-config
• Owner: cryptiklemur
• License: mit
• Created: 2018-12-12T19:56:01.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2019-02-12T02:35:07.000Z (over 7 years ago)
• Last Synced: 2025-02-01T15:45:19.414Z (over 1 year ago)
• Language: JavaScript
• Size: 23.4 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# load-vault-config

[![Build Status](https://travis-ci.org/aequasi/load-vault-config.svg?branch=master)](https://travis-ci.org/aequasi/load-vault-config)

This is a small packaged script that lets you load vault secrets into bash environment variables for consumption via other scripts.

### Usage

Create a config file like: 

```yaml

secrets:

    FOO:

        path: "secret/%ENVIRONMENT%"

        key:  "foo"

    BAR:

        path: "secret/baz"

        key:  "bar"

```

Then run: 

```bash

$ VAULT_ADDR=my_vault_addr VAULT_TOKEN=my_vault_token ENVIRONMENT=production loadVaultConfigs config.yaml

// This also works

$ VAULT_ROLE_ID=role_id VAULT_SECRET_ID=secret_id ENVIRONMENT=production loadVaultConfigs config.yaml

```

Note: `VAULT_ADDR` is not required. Will be the default vault address by default. One of the authentication methods must be used though (token or approle)

Which will output:

```bash

FOO="value of the secret in secret/production foo"

BAR="value of the secret in secret/baz bar"

```