amaceog/kustomize-vault repository overview

⁠Kustomize Secret Generator Plugin for Vault

This repo has two components: a Kustomize secret generator plugin for Vault and a Dockerfile that exposes a version of kustomize that includes the plugin.

⁠Kustomize Secret Generator Go plugin

This Go plugin allows Kustomize⁠ to generate Kubernetes Secret manifests that contain secrets from Hashiciorp Vault⁠. See the Kustomize Generating Secrets docs⁠ for more information about the mechanics.

⁠Kustomize executable packaged with the plugin

The Dockerfile exposes a version of kustomize that includes the Vault plugin.

Usage:

docker run -it --rm \
  -v (pwd):/working \
  -e "VAULT_ADDR=XXX" -e "VAULT_TOKEN=XXX" \
   kustomize build .