HashiCorp/Vault - Revision history

Pio2pio: /* Usage */

2021-11-02T13:32:04Z

Usage

@@ Line 4: / Line 4: @@
 * Through a unified API, users can access an encrypted Key/Value store and network encryption-as-a-service
 * generate AWS IAM/STS credentials, SQL/NoSQL databases, X.509 certificates, SSH credentials and more...
 = Usage =
 == Initialising ==

Pio2pio: /* Helper functions */

2021-08-25T10:25:20Z

Helper functions

@@ Line 134: / Line 134: @@
 # or more systematically
 FILE=secret__users__bob_user; vault write -address=$VAULT_CLIENT_ADDR ${FILE//__//} @${FILE}
 </source>

Pio2pio: Pio2pio moved page HashiCorp Vault to HashiCorp/Vault without leaving a redirect

2020-08-23T13:19:39Z

Pio2pio moved page HashiCorp Vault to HashiCorp/Vault without leaving a redirect

← Older revision	Revision as of 15:19, 23 August 2020
(No difference)

Pio2pio: /* Unseal and login/connect */

2019-04-25T21:09:03Z

Unseal and login/connect

← Older revision		Revision as of 23:09, 25 April 2019
Line 30:		Line 30:
	<source lang="bash">		<source lang="bash">
	$ vault operator unseal <key 1> #the 'Unseal Key 1' UipPveVsmScOb/s/lk9C7OBZTspGC7SHGptDwDxbjbs= is created during init process		$ vault operator unseal <key 1> #the 'Unseal Key 1' UipPveVsmScOb/s/lk9C7OBZTspGC7SHGptDwDxbjbs= is created during init process
			# vault unseal --address=$VAULT_CLIENT_ADDR "$VAULT_UNSEAL_KEY" #deprecated command and removed in 0.12
	$ vault status \| grep Sealed		$ vault status \| grep Sealed
	Sealed false		Sealed false

Pio2pio: /* List, read and write with help of jq */

2019-03-29T21:05:07Z

List, read and write with help of jq

← Older revision		Revision as of 23:05, 29 March 2019
Line 132:		Line 132:

	# or more systematically		# or more systematically
	FILE=secret__users__bob_user		FILE=secret__users__bob_user; vault write -address=$VAULT_CLIENT_ADDR ${FILE//__//} @${FILE}
	vault write -address=$VAULT_CLIENT_ADDR ${FILE//__//} @${FILE}
	</source>		</source>

Pio2pio: /* List, read and write with help of jq */

2019-03-29T20:41:30Z

List, read and write with help of jq

← Older revision		Revision as of 22:41, 29 March 2019
Line 116:		Line 116:

	# or more systematically		# or more systematically
	KEY=secret/users/bob_user		KEY=secret/users/bob_user; vault read --address=$VAULT_CLIENT_ADDR --format=json $KEY \| jq .data > ${KEY////__}
	vault read -address=$VAULT_CLIENT_ADDR ~~$KEY~~ -format=json \| jq .data > ${KEY////__}
	$ ll secret__users__bob_user		$ ll secret__users__bob_user
	-rw-rw-rw- 1 piotr piotr 58 Mar 14 07:43 secret__users__bob_user		-rw-rw-rw- 1 piotr piotr 58 Mar 14 07:43 secret__users__bob_user

Pio2pio: /* List, read and write with help of jq */

2019-03-14T07:45:25Z

List, read and write with help of jq

← Older revision		Revision as of 09:45, 14 March 2019
Line 118:		Line 118:
	KEY=secret/users/bob_user		KEY=secret/users/bob_user
	vault read -address=$VAULT_CLIENT_ADDR $KEY -format=json \| jq .data > ${KEY////__}		vault read -address=$VAULT_CLIENT_ADDR $KEY -format=json \| jq .data > ${KEY////__}
	# underscore here us a unique character that should not match any part of branch/key, ~~explain~~ 4x'////'		$ ll secret__users__bob_user
			-rw-rw-rw- 1 piotr piotr 58 Mar 14 07:43 secret__users__bob_user

			# underscore here us a unique character(token) that should not match any part of branch/key, will be used to recreate the key
			# Explain 4x'////'
	# // -: all occurrences, part of bash parameter expansion option		# // -: all occurrences, part of bash parameter expansion option
	# / -: delimiter		# / -: delimiter

Pio2pio: /* List, read and write with help of jq */

2019-03-13T19:39:13Z

List, read and write with help of jq

← Older revision		Revision as of 21:39, 13 March 2019
Line 107:		Line 107:
	;Export data to a file		;Export data to a file
	<source lang="bash">		<source lang="bash">
	$ vault read -address=$VAULT_CLIENT_ADDR secret/users/bob_user -format=json \| jq .data > bob_credentials.json ~~#export data (keys/values pairs) to a file~~		# export data (keys/values pairs) to a file
			vault read -address=$VAULT_CLIENT_ADDR secret/users/bob_user -format=json \| jq .data > bob_credentials.json
	$ cat bob_credentials.json		cat bob_credentials.json
	{		{
	"password": "pass1234",		"password": "pass1234",
	"user": "bob@example.com"		"user": "bob@example.com"
	}		}

			# or more systematically
			KEY=secret/users/bob_user
			vault read -address=$VAULT_CLIENT_ADDR $KEY -format=json \| jq .data > ${KEY////__}
			# underscore here us a unique character that should not match any part of branch/key, explain 4x'////'
			# // -: all occurrences, part of bash parameter expansion option
			# / -: delimiter
			# / -: string to search, followed by delimiter '/' again
	</source>		</source>
	;Write data these could be any secrets or configuration into Vault		;Write data these could be any secrets or configuration into Vault
	<source lang="bash">		<source lang="bash">
	$ vault write -address=$VAULT_CLIENT_ADDR secret/users/bob_user @bob_credentials.json		vault write -address=$VAULT_CLIENT_ADDR secret/users/bob_user @bob_credentials.json

			# or more systematically
			FILE=secret__users__bob_user
			vault write -address=$VAULT_CLIENT_ADDR ${FILE//__//} @${FILE}
	</source>		</source>

Line 123:		Line 135:
	<source lang=bash>		<source lang=bash>
	a=secret_loc-a_branch1_branch2_key1		a=secret_loc-a_branch1_branch2_key1
	echo ${a//_//}		echo ${a//__//}
	secret/loc-a/branch1/branch2/key1		secret/loc-a/branch1/branch2/key1
	# / :- substitutes 1st match		# / :- substitutes 1st match

Pio2pio: /* Helper functions */

2019-03-13T19:18:11Z

Helper functions

← Older revision		Revision as of 21:18, 13 March 2019
Line 121:		Line 121:

	=== Helper functions ===		=== Helper functions ===
			<source lang=bash>
	a=secret_loc-a_branch1_branch2_key1		a=secret_loc-a_branch1_branch2_key1
	echo ${a//_//}		echo ${a//_//}
Line 126:		Line 127:
	# / :- substitutes 1st match		# / :- substitutes 1st match
	# // :- substitutes all matches		# // :- substitutes all matches
			</source>

	= References =		= References =
	*[https://www.vaultproject.io/ vaultproject] Official HashiCorp		*[https://www.vaultproject.io/ vaultproject] Official HashiCorp

Pio2pio: /* List, read and write with help of jq */

2019-03-13T19:17:48Z

List, read and write with help of jq

← Older revision		Revision as of 21:17, 13 March 2019
Line 119:		Line 119:
	$ vault write -address=$VAULT_CLIENT_ADDR secret/users/bob_user @bob_credentials.json		$ vault write -address=$VAULT_CLIENT_ADDR secret/users/bob_user @bob_credentials.json
	</source>		</source>

			=== Helper functions ===
			a=secret_loc-a_branch1_branch2_key1
			echo ${a//_//}
			secret/loc-a/branch1/branch2/key1
			# / :- substitutes 1st match
			# // :- substitutes all matches

	= References =		= References =
	*[https://www.vaultproject.io/ vaultproject] Official HashiCorp		*[https://www.vaultproject.io/ vaultproject] Official HashiCorp