Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/sumup-oss/terraform-provider-vaulted
Encrypted HashiCorp Vault secrets via Terraform that can be stored in SCM such as Git
https://github.com/sumup-oss/terraform-provider-vaulted
devops go golang hashicorp hashicorp-vault infrastructure-as-code terraform vault
Last synced: 28 days ago
JSON representation
Encrypted HashiCorp Vault secrets via Terraform that can be stored in SCM such as Git
- Host: GitHub
- URL: https://github.com/sumup-oss/terraform-provider-vaulted
- Owner: sumup-oss
- License: apache-2.0
- Created: 2019-04-12T00:43:10.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2023-04-28T10:59:08.000Z (over 1 year ago)
- Last Synced: 2024-11-01T03:32:58.740Z (about 1 month ago)
- Topics: devops, go, golang, hashicorp, hashicorp-vault, infrastructure-as-code, terraform, vault
- Language: Go
- Homepage:
- Size: 470 KB
- Stars: 38
- Watchers: 8
- Forks: 15
- Open Issues: 12
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Codeowners: CODEOWNERS
Awesome Lists containing this project
- awesome-terraform - terraform-provider-vaulted - Encrypted HashiCorp Vault secrets via Terraform that can be stored in SCM such as Git. (Providers / Miscellaneous)
- awesome-tf - terraform-provider-vaulted - Encrypted HashiCorp Vault secrets via Terraform that can be stored in SCM such as Git. (Providers / Vendor supported providers)
README
# terraform-provider-vaulted
![Build status](https://github.com/sumup-oss/terraform-provider-vaulted/workflows/CI/badge.svg)
[![Go Report Card](https://goreportcard.com/badge/github.com/sumup-oss/terraform-provider-vaulted)](https://goreportcard.com/report/github.com/sumup-oss/terraform-provider-vaulted)
A terraform provider that utilizes https://github.com/sumup-oss/vaulted to provide
https://github.com/hashicorp/terraform for https://github.com/hashicorp/vault encrypted secrets via
`resource.vaulted_vault_secret` that:
* are **never** stored as plaintext in your terraform state.
* are **never** logged in stdout as plaintext.
* can be **safely** stored in SCM such as Git in their encrypted payload format produced by https://github.com/sumup-oss/vaulted .Tested and used against https://github.com/hashicorp/vault official docker image versions:
* `0.9.x`,
* `0.11.6`,
* `1.0.3`,
* `1.1.0`,
* latestCheck [magefile.go](./magefile.go) for up-to-date info what the test suite matrix uses.
Also shown at https://medium.com/@syndbg/provisioning-vault-encrypted-secrets-using-terraform-using-sumup-oss-vaulted-and-4aa9721d082c
## Typical Terraform workflow
![Typical terraform workflow](./.github/terraform-flow.png)
## Terraform workflow with usage of https://github.com/sumup/vaulted and this provider
![Terraform workflow with vaulted](./.github/terraform-flow-vaulted.png)
## Installation
### 0.12 Terraform and newer
Use https://registry.terraform.io/providers/sumup-oss/vaulted/latest
### Pre-0.12 Terraform
1. Download latest GitHub release locally for your OS and architecture.
2. Follow https://www.terraform.io/docs/configuration/providers.html#third-party-plugins
3. Move downloaded release binary to local terraform plugin dir.E.g installation on a Linux AMD64 host
```
# Assuming we already downloaded the binary at ~/Downloads/terraform-provider-vaulted_v0.4.0_linux_amd64
> mkdir -p ~/.terraform.d/plugins/linux_amd64
> mv ~/Downloads/terraform-provider-vaulted_v0.4.0_linux_amd64 ~/.terraform.d/plugins/linux_amd64/terraform-provider-vaulted_v0.4.0
```And we're ready to use it!
## [Use cases](./USE_CASES.md)
## [Usage](./USAGE.md)
## [Contributing](./CONTRIBUTING.md)
## [FAQ](./FAQ.md)
## About SumUp
[SumUp](https://sumup.com) is a mobile-point of sale provider.
It is our mission to make easy and fast card payments a reality across the *entire* world.
You can pay with SumUp in more than 30 countries, already.
Our engineers work in Berlin, Cologne, Sofia and Sāo Paulo.
They write code in JavaScript, Swift, Ruby, Go, Java, Erlang, Elixir and more.
Want to come work with us? [Head to our careers page](https://sumup.com/careers) to find out more.