Usage

Current Docker image: avtandilko/vault-switcher:v0.0.8

Environment variables

• VAULT_ADDR
• VAULT_TOKEN_FILE
• VAULT_TOKEN
• VAULT_MOUNT_POINT
• VAULT_SOURCE_SECRET
• VAULT_DEST_SECRET
• VAULT_SECRET_TO_DELETE
• VARIABLES_LIST

Command-line arguments

usage: vault-switcher.py [-h] -a {clone-secret,clone-variables,delete-secret}

optional arguments:
  -h, --help            show this help message and exit
  -a {clone-secret,clone-variables,delete-secret}, --action {clone-secret,clone-variables,delete-secret}

Examples

Common variables. Should always be set

export VAULT_ADDR = "https://127.0.0.1:8200"
export VAULT_TOKEN_FILE = "/var/run/secrets/vault_token"

Scenario: full secret copy

export VAULT_MOUNT_POINT = "secrets"
export VAULT_SOURCE_SECRET = "source_secret"
export VAULT_DEST_SECRET = "dest_secret"

vault-switcher.py -a clone-secret

Scenario: specific variables copy

export VAULT_MOUNT_POINT = "secrets"
export VAULT_SOURCE_SECRET = "source_secret"
export VAULT_DEST_SECRET = "dest_secret"
export VARIABLES_LIST = '["VAR1", "VAR2", "VAR3"]'

vault-switcher.py -a clone-variables

Scenario: delete secret

export VAULT_MOUNT_POINT = "secrets"
export VAULT_SECRET_TO_DELETE = "secret_to_delete"

vault-switcher.py -a delete-secret