readytalk/vault-admin repository overview

⁠Vault Admin

This project manages Vault administrative tasks such as LDAP groups/policy updates and AWS provisioner setup.

• Installation⁠
  • CLI⁠
  • Docker⁠
• Options⁠
• Configuration Files⁠

⁠Installation

This tool can be used via Docker or the CLI.

⁠CLI

Download and extract the latest binary at: ####

Run ./vadmin <flags>. See below for a description of the command line flags.

⁠Docker

The Docker container must be run in interactive mode with the -it because it prompts for things like policy deletion, etc. The tags on the docker container corresponds to the version of Vault that it was built for.

docker run \
  --rm \
	-it \
	-e VAULT_ADDR=https://vault.mysite.com:8200 \
	-e VAULT_TOKEN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx \
	-v $(pwd)/config:/config
	readytalk/vault-admin:latest

Map wherever you have your Vault configuration files to /config within the container.

⁠Options

All options can be set via environment variables or command line options

⁠Configuration Files

The configuration files are what drive how Vault is configured. The following is an example of how to set up your CONFIGURATION_PATH. See the examples/ directory for how these files should be structured.

├── auth_methods/
│   ├── github.json
│   ├── ldap.json
│   └── ldap-2.json
├── policies/
│   ├── back-end-team.json
│   ├── billing.json
│   ├── ci-team.json
│   ├── front-end-team.json
│   └── sre-team.json
├── secrets-engines/
│   ├── aws-main/
│   │   ├── aws.json
│   │   ├── config.json
│   │   ├── roles/
│   │   │   ├── admin.json
│   │   │   ├── s3-read-only.json
│   │   │   ├── s3-read-write.json
│   │   │   └── sqs.json
│   ├── aws-sandbox/
│   │   └── ...
│   ├── db-dev/
│   │   ├── db.json
│   │   ├── config.json
│   │   ├── roles/
│   │   │   ├── admin.json
│   │   │   ├── read-only.json
│   │   │   └── read-write.json
│   ├── db-prod/
│   │   └── ...