Vault.tcl
No OneTemporary
Actions

Size

604 B

Referenced Files

None

Subscribers

None

Vault.tcl
View Options

	package require vault

	proc vault_login {} {
	global vault

	::vault::init $vault(host)
	::vault::appRoleLogin $vault(roleID) $vault(secretID)
	}

	proc vault_get {property {key {}}} {
	if {[catch {set credential [::vault::readKV apps/viperserv/$property $key]} err]} {
	if {[string match "403 Forbidden" $err]} {
	# Token expired?
	vault_login
	return [::vault::readKV apps/viperserv/$property $key]
	}

	# Errors like 503 if unsealed we can't recover easily, so propagate
	error $err
	}

	return $credential
	}

	vault_login