Contents

# Generic secret (k/v pairs) backend provisioning
#
# WARNING: Use of this module will inevitably lead you down
# the path of commiting secrets into repositories. Sometimes,
# that's ok! For example, consider using Vault's generic backend
# to store non-secret data, like a set of public certificates
# (but not their private keys).
# https://www.vaultproject.io/api/secret/generic/index.html
class Vault::Provision::Secret < Vault::Provision::Prototype
  def provision!
    repo_files_by_mount_type('generic').each do |rf|
      validate_file! rf
      kv_path = rf.sub(/\A#{@instance_dir}/, '').sub(/.json\z/, '')

      puts "  * #{kv_path}"
      @vault.post "v1/#{kv_path}", File.read(rf)
    end
  end
end

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
vault-provision-0.1.12	lib/vault/provision/secret.rb
vault-provision-0.1.11	lib/vault/provision/secret.rb
vault-provision-0.1.10	lib/vault/provision/secret.rb
vault-provision-0.1.9	lib/vault/provision/secret.rb
vault-provision-0.1.8	lib/vault/provision/secret.rb