Vault: Difference between revisions

From Chorke Wiki
Jump to navigation Jump to search
Line 59: Line 59:


|valign='top' style='width:50%'|
|valign='top' style='width:50%'|
|-
|valign='top' colspan='2'|
<syntaxhighlight lang='bash'>
vault kv put /chorke/academia/dev/mariadb username='academia' password='60NZ5sonTeHGAiXm'
vault kv get -field=password /chorke/academia/dev/mariadb
vault kv get /chorke/academia/dev/mariadb
</syntaxhighlight>
|valign='top'|
|}
|}
{|class='wikitable mw-collapsible'
{|class='wikitable mw-collapsible'

Revision as of 08:42, 20 January 2026

curl -fsSL https://apt.releases.hashicorp.com/gpg\
 | sudo tee /etc/apt/keyrings/hashicorp.asc >/dev/null

DISTRIBUTION=$(. /etc/os-release && echo "${VERSION_CODENAME}")
cat << SRC | sudo tee /etc/apt/sources.list.d/hashicorp.list >/dev/null
deb [arch=$(dpkg --print-architecture)\
 signed-by=/etc/apt/keyrings/hashicorp.asc]\
 https://apt.releases.hashicorp.com ${DISTRIBUTION} main
SRC
cat <<'EXE' | sudo bash
apt-get update && apt-get install -y vault
systemctl disable --now vault.service
systemctl stop          vault.service
systemctl mask          vault.service
systemctl status        vault.service
vault version
which vault
EXE
export VAULT_TOKEN='hvs.b613hrNQ25fJEkWqGB2KCWgl'
export VAULT_ADDR='https://vault.shahed.biz.ops'
vault status
export VAULT_SKIP_VERIFY=true
export VAULT_FORMAT=yaml
vault login

Engine » KV

Engine » KV

KV » V1

vault secrets enable -path=/chorke/academia/prod kv
vault secrets enable -path=/chorke/academia/uat  kv
vault secrets enable -path=/chorke/academia/dev  kv
vault kv put /chorke/academia/dev/mariadb username='academia' password='60NZ5sonTeHGAiXm'
vault kv get -field=password /chorke/academia/dev/mariadb
vault kv get /chorke/academia/dev/mariadb

KV » V2

vault secrets enable -path=secret kv-v2
vault kv put secret/db-creds username='admin' password='60NZ5sonTeHGAiXm'
vault kv get -field=password secret/db-creds
vault kv get secret/db-creds

Playground

Playground

echo "$(cat /dev/urandom|tr -dc 'A-Za-z0-9'|head -c 40)"
echo "$(cat /dev/urandom|tr -dc 'A-Za-z0-9'|head -c 20)"
echo "$(cat /dev/urandom|tr -dc 'A-Za-z0-9'|head -c 16)"
echo "$(cat /dev/urandom|tr -dc 'A-Za-z0-9'|head -c  8)"
vault token lookup
vault policy  list
vault secrets list
vault status

References

References