HomeDevCentral

Generate secretsmith Vault configuration for routers via Salt

Description

Generate secretsmith Vault configuration for routers via Salt

Summary:
This change adds to the Salt state carp (roles/router/carp/init.sls) a secretsmith configuration file
on routers, allowing the script from T2276 to authenticate to Vault using AppRole.

The configuration file (/usr/local/etc/secrets/carp-secretsmith.yaml) contains:

  • Vault server URL
  • AppRole credentials (role_id and secret_id) retrieved from Vault

Ref T2276

Test Plan:

  • Applied state on router-002:

    salt 'router-002' state.apply roles/router test=True

    salt 'router-002' state.apply roles/router
  • Applied state on router-003:

    salt 'router-003' state.apply roles/router test=True

    salt 'router-003' state.apply roles/router

Reviewers: dereckson, Duranzed

Reviewed By: dereckson

Subscribers: Duranzed, dereckson

Maniphest Tasks: T2276

Differential Revision: https://devcentral.nasqueron.org/D4031

Details