mirror of
https://github.com/Luzifer/vault2env.git
synced 2024-11-08 16:20:07 +00:00
115 lines
3 KiB
Go
115 lines
3 KiB
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"io/ioutil"
|
|
"log"
|
|
"os"
|
|
"os/exec"
|
|
|
|
"github.com/Luzifer/go_helpers/env"
|
|
"github.com/Luzifer/rconfig"
|
|
"github.com/hashicorp/vault/api"
|
|
"github.com/mitchellh/go-homedir"
|
|
)
|
|
|
|
var (
|
|
cfg = struct {
|
|
VaultAddress string `flag:"vault-addr" env:"VAULT_ADDR" default:"https://127.0.0.1:8200" description:"Vault API address"`
|
|
VaultAppID string `flag:"vault-app-id" env:"VAULT_APP_ID" default:"" description:"The app-id to use for authentication"`
|
|
VaultUserID string `flag:"vault-user-id" env:"VAULT_USER_ID" default:"" description:"The user-id to use for authentication"`
|
|
VaultToken string `flag:"vault-token" env:"VAULT_TOKEN" vardefault:"vault-token" description:"Specify a token to use instead of app-id auth"`
|
|
Export bool `flag:"export,e" default:"false" description:"Show export statements instead of running the command specified"`
|
|
VersionAndExit bool `flag:"version" default:"false" description:"Print program version and exit"`
|
|
}{}
|
|
version = "dev"
|
|
)
|
|
|
|
func vaultTokenFromDisk() string {
|
|
vf, err := homedir.Expand("~/.vault-token")
|
|
if err != nil {
|
|
return ""
|
|
}
|
|
|
|
data, err := ioutil.ReadFile(vf)
|
|
if err != nil {
|
|
return ""
|
|
}
|
|
|
|
return string(data)
|
|
}
|
|
|
|
func init() {
|
|
rconfig.SetVariableDefaults(map[string]string{
|
|
"vault-token": vaultTokenFromDisk(),
|
|
})
|
|
rconfig.Parse(&cfg)
|
|
|
|
if cfg.VersionAndExit {
|
|
fmt.Printf("vault2env %s\n", version)
|
|
os.Exit(0)
|
|
}
|
|
|
|
if (cfg.VaultAppID == "" || cfg.VaultUserID == "") && cfg.VaultToken == "" {
|
|
log.Fatalf("[ERR] You need to either set vault-app-id and vault-user-id or set vault-token")
|
|
}
|
|
|
|
if cfg.Export {
|
|
if len(rconfig.Args()) != 2 {
|
|
log.Fatalf("[ERR] Usage: vault2env --export [secret path]")
|
|
}
|
|
} else {
|
|
if len(rconfig.Args()) < 3 {
|
|
log.Fatalf("[ERR] Usage: vault2env [secret path] [command]")
|
|
}
|
|
}
|
|
}
|
|
|
|
func main() {
|
|
client, err := api.NewClient(&api.Config{
|
|
Address: cfg.VaultAddress,
|
|
})
|
|
if err != nil {
|
|
log.Fatalf("Unable to create client: %s", err)
|
|
}
|
|
|
|
if cfg.VaultToken == "" {
|
|
loginSecret, lserr := client.Logical().Write("auth/app-id/login/"+cfg.VaultAppID, map[string]interface{}{
|
|
"user_id": cfg.VaultUserID,
|
|
})
|
|
if lserr != nil || loginSecret.Auth == nil {
|
|
log.Fatalf("Unable to fetch authentication token: %s", lserr)
|
|
}
|
|
|
|
client.SetToken(loginSecret.Auth.ClientToken)
|
|
defer client.Auth().Token().RevokeSelf(client.Token())
|
|
} else {
|
|
client.SetToken(cfg.VaultToken)
|
|
}
|
|
|
|
data, err := client.Logical().Read(rconfig.Args()[1])
|
|
if err != nil {
|
|
log.Fatalf("Unable to fetch data: %s", err)
|
|
}
|
|
|
|
if cfg.Export {
|
|
for k, v := range data.Data {
|
|
fmt.Printf("export %s=\"%s\"\n", k, v)
|
|
}
|
|
return
|
|
}
|
|
|
|
emap := env.ListToMap(os.Environ())
|
|
for k, v := range data.Data {
|
|
emap[k] = v.(string)
|
|
}
|
|
|
|
cmd := exec.Command(rconfig.Args()[2], rconfig.Args()[3:]...)
|
|
cmd.Stdout = os.Stdout
|
|
cmd.Stderr = os.Stderr
|
|
cmd.Stdin = os.Stdin
|
|
cmd.Env = env.MapToList(emap)
|
|
if err := cmd.Run(); err != nil {
|
|
log.Fatal("Command exitted unclean (code != 0)")
|
|
}
|
|
}
|