luzifer/yaml-vault
1
0
Fork 0
mirror of https://github.com/Luzifer/yaml-vault.git synced 2024-10-18 14:54:24 +00:00
Code Issues Releases Wiki Activity

allow ignoring errors (writing sys/auth/ path or similar)

Browse source
This commit is contained in:
Knut Ahlers 2016-07-19 13:59:55 +02:00
parent dbb64eed3b
commit b63b9ca03f
Signed by: luzifer
GPG key ID: DC2729FDD34BE99E
1 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
main.go
View file

@ -22,6 +22,7 @@ var (
Import bool `flag:"import" default:"false" description:"Enable importing data into Vault"` Import bool `flag:"import" default:"false" description:"Enable importing data into Vault"`
Export bool `flag:"export" default:"false" description:"Enable exporting data from Vault"` Export bool `flag:"export" default:"false" description:"Enable exporting data from Vault"`
ExportPaths []string `flag:"export-paths" default:"secret" description:"Which paths to export"` ExportPaths []string `flag:"export-paths" default:"secret" description:"Which paths to export"`
IgnoreErrors bool `flag:"ignore-errors" default:"false" description:"Do not exit on read/write errors"`
VaultAddress string `flag:"vault-addr" env:"VAULT_ADDR" default:"https://127.0.0.1:8200" description:"Vault API address"` VaultAddress string `flag:"vault-addr" env:"VAULT_ADDR" default:"https://127.0.0.1:8200" description:"Vault API address"`
VaultToken string `flag:"vault-token" env:"VAULT_TOKEN" vardefault:"vault-token" description:"Specify a token to use instead of app-id auth"` VaultToken string `flag:"vault-token" env:"VAULT_TOKEN" vardefault:"vault-token" description:"Specify a token to use instead of app-id auth"`
VersionAndExit bool `flag:"version" default:"false" description:"Print program version and exit"` VersionAndExit bool `flag:"version" default:"false" description:"Print program version and exit"`
@ -43,6 +44,10 @@ func debug(format string, v ...interface{}) {
} }
} }
func info(format string, v ...interface{}) {
log.Printf(format, v...)
}
func vaultTokenFromDisk() string { func vaultTokenFromDisk() string {
vf, err := homedir.Expand("~/.vault-token") vf, err := homedir.Expand("~/.vault-token")
if err != nil { if err != nil {
@ -146,6 +151,10 @@ func readRecurse(client *api.Client, path string, out *importFile) error {
} }
if secret == nil { if secret == nil {
if cfg.IgnoreErrors {
info("Unable to read %s: %#v", path, secret)
return nil
}
return fmt.Errorf("Unable to read %s: %#v", path, secret) return fmt.Errorf("Unable to read %s: %#v", path, secret)
} }
@ -156,6 +165,10 @@ func readRecurse(client *api.Client, path string, out *importFile) error {
secret, err := client.Logical().List(path) secret, err := client.Logical().List(path)
if err != nil { if err != nil {
if cfg.IgnoreErrors {
info("Error reading %s: %s", path, err)
return nil
}
return fmt.Errorf("Error reading %s: %s", path, err) return fmt.Errorf("Error reading %s: %s", path, err)
} }
@ -189,6 +202,10 @@ func importToVault(client *api.Client) error {
for key, data := range keys.Keys { for key, data := range keys.Keys {
if _, err := client.Logical().Write(key, data); err != nil { if _, err := client.Logical().Write(key, data); err != nil {
if cfg.IgnoreErrors {
info("Error while writing data to key '%s': %s", key, err)
continue
}
return err return err
} }
debug("Successfully wrote data to key '%s'", key) debug("Successfully wrote data to key '%s'", key)