ogulcanaydogan/vault-init repository overview

docker run \
  -e VAULT_ADDR=http://vault:8200 \
  -e VAULT_TOKEN=hvs.xxx \
  -e VAULT_SECRET_PATH=secret/myapp \
  -v $(pwd)/secrets:/secrets \
  ogulcanaydogan/vault-init

-e VAULT_AUTH_METHOD=token -e VAULT_TOKEN=hvs.xxx

-e VAULT_AUTH_METHOD=approle -e VAULT_ROLE_ID=xxx -e VAULT_SECRET_ID=xxx

-e VAULT_AUTH_METHOD=kubernetes -e VAULT_ROLE=myapp

services:
  vault-init:
    image: ogulcanaydogan/vault-init
    environment:
      - VAULT_ADDR=http://vault:8200
      - VAULT_TOKEN=${VAULT_TOKEN}
      - VAULT_SECRET_PATH=secret/myapp
    volumes:
      - secrets:/secrets

  app:
    image: myapp
    depends_on:
      vault-init:
        condition: service_completed_successfully
    volumes:
      - secrets:/secrets:ro
    env_file:
      - /secrets/.env

volumes:
  secrets:

initContainers:
  - name: vault-init
    image: ogulcanaydogan/vault-init
    env:
      - name: VAULT_ADDR
        value: "http://vault.vault:8200"
      - name: VAULT_AUTH_METHOD
        value: "kubernetes"
      - name: VAULT_ROLE
        value: "myapp"
      - name: VAULT_SECRET_PATH
        value: "secret/myapp/config"
    volumeMounts:
      - name: secrets
        mountPath: /secrets