You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Feature
Instead of using the Env Vars to configure the Vault encryption, would it be possible to also support configuring TerraHelp with a configuration json file?
Context
Reason for the feature is that it would allow people to store their config in a json blob in Vault and output it into the expected json file format using the Vault cli client.
e.g. vault kv get secret/terrahelp | jq -r '.data.data' > th-config.json
So you can run terrahelp vault-autoconfig and subsequent commands based on the provided json.
The Vault env vars presumably are already set in order to run vault kv get!
Of course if more than one Vault instances are used perhaps an override of VAULT_ADDR, VAULT_TOKEN and VAULT_SKIP_VERIFY (and VAULT_NAMESPACE for Enterprise Vault) could also still be useful as part of the config.json for TerraHelp.
Potentially default to specific filename and provide a -config-file= flag for alternate file naming of a config file.
Benefits
store/manage the Vault Named Key (and other key/value pairs) in Vault!
convenience of having full config available with simple one-liner
The text was updated successfully, but these errors were encountered:
Feature
Instead of using the Env Vars to configure the Vault encryption, would it be possible to also support configuring TerraHelp with a configuration json file?
Context
Reason for the feature is that it would allow people to store their config in a json blob in Vault and output it into the expected json file format using the Vault cli client.
e.g.
vault kv get secret/terrahelp | jq -r '.data.data' > th-config.json
with contents like
So you can run
terrahelp vault-autoconfig
and subsequent commands based on the provided json.The Vault env vars presumably are already set in order to run
vault kv get
!Of course if more than one Vault instances are used perhaps an override of
VAULT_ADDR
,VAULT_TOKEN
andVAULT_SKIP_VERIFY
(andVAULT_NAMESPACE
for Enterprise Vault) could also still be useful as part of the config.json for TerraHelp.Potentially default to specific filename and provide a
-config-file=
flag for alternate file naming of a config file.Benefits
The text was updated successfully, but these errors were encountered: