lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops/vault: add reissue-secret-id utility

Browse source
This commit is contained in:
Luke Granger-Brown 2022-03-14 21:28:16 +00:00
parent 262620f177
commit 8c6c7af3f7
1 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
ops/vault/reissue-secret-id.sh Executable file
View file

@ -0,0 +1,14 @@
#!/usr/bin/env nix-shell
#!nix-shell -p vault -p jq -i bash
set -euo pipefail
readonly server_name=${1}
export VAULT_ADDR=https://vault.int.lukegb.com/
echo Checking login credentials... >&2
vault token lookup >/dev/null || vault login -method=oidc role=admin >&2
echo Creating new secret... >&2
vault write -f -format=json auth/approle/role/${server_name}/secret-id | jq -r '.data.secret_id'