Sign inSign up

bodsch/docker-vault

By bodsch

•Updated about 6 years ago

Minimal Image with Hashicorp Vault (https://www.vaultproject.io)

Image
0

2.8K

bodsch/docker-vault repository overview

⁠docker-vault

Minimal Image with Hashicorp Vault (https://www.vaultproject.io⁠)

⁠Status

Docker Pulls Image Size Build Status

⁠Build

Your can use the included Makefile.

To build the Container: make build

To remove the builded Docker Image: make clean

Starts the Container: make run

Starts the Container with Login Shell: make shell

Entering the Container: make exec

Stop (but not kill): make stop

History make history

⁠Docker Hub

You can find the Container also at DockerHub⁠

⁠First steps

look, read and play⁠

/src/private/docker-vault $ docker-compose -f docker-compose.yml.example up --build
alias vault='docker exec -it vault vault "$@"'
export VAULT_ADDR="http://localhost:8200"
vault operator init -address=${VAULT_ADDR} -format=json > keys.txt
vault status -address=${VAULT_ADDR}

vault operator unseal -address=${VAULT_ADDR} $(jq --raw-output .unseal_keys_b64 keys.txt  | jq --raw-output .[0])
vault operator unseal -address=${VAULT_ADDR} $(jq --raw-output .unseal_keys_b64 keys.txt  | jq --raw-output .[1])
vault operator unseal -address=${VAULT_ADDR} $(jq --raw-output .unseal_keys_b64 keys.txt  | jq --raw-output .[2])

vault status -address=${VAULT_ADDR}

export VAULT_TOKEN=$(grep 'Initial Root Token:' keys.txt | awk '{print substr($NF, 1, length($NF)-1)}')
vault auth -address=${VAULT_ADDR} ${VAULT_TOKEN}

vault write -address=${VAULT_ADDR} secret/api-key value=12345678

vault read -address=${VAULT_ADDR} secret/api-key

vault read -address=${VAULT_ADDR} -field=value secret/api-key


curl -H "X-Vault-Token:$VAULT_TOKEN" -XGET http://docker:8200/v1/secret/api-key

curl -s -H  "X-Vault-Token:$VAULT_TOKEN" -XGET http://docker:8200/v1/secret/api-key | jq -r .data.value


Tag summary

Content type

Image

Digest

Size

36.8 MB

Last updated

about 6 years ago

docker pull bodsch/docker-vault