项目作者: openlab-red

项目描述 :
Vault Secret Fetcher
高级语言: Go
项目地址: git://github.com/openlab-red/vault-secret-fetcher.git
创建时间: 2018-10-10T15:07:44Z
项目社区:https://github.com/openlab-red/vault-secret-fetcher

开源协议:Apache License 2.0

下载


DEPRECATED

In favour of Vault Agent Template

Hashicorp Vault Secret Fetcher

  1. Vault Secret Fetcher sidecar container for kubernetes applications
  2. Usage:
  3. vault-secret-fetcher [command]
  4. Available Commands:
  5. start start retrieves credentials managed by the vault agent
  6. help Help about any command
  7. Flags:
  8. -h, --help help for vault-secret-fetcher
  9. Use "vault-secret-fetcher [command] --help" for more information about a command.

Environment variable

NAME DEFAULT DESCRIPTION
LOG_LEVEL INFO Log level from logrus
VAULT_ADDR Vault Address
VAULT_CAPATH Vault CA
VAULT_TOKEN Vault Agent sink file path
VAULT_SECRET Vault Secret to retrieve, CSV format
VAULT_INSECURE false Vault TLS Skip Verify
VAULT_SECRET_FETCHER_CRON 1 * Cron Scheduler for the secret fetcher
PROPERTIES_FILE Target properties file to save the decrypted secret

Make vault-secret-fetcher image available in OpenShift

  1. Build

    1. oc project openshift
    2. oc new-build --name vault-secret-fetcher https://github.com/openlab-red/vault-secret-fetcher
  2. Check the Image Stream.

    1. oc get is vault-secret-fetcher

Reference