HomeDevCentral

Generate secretsmith Vault configuration for routers via Salt

Description

Generate secretsmith Vault configuration for routers via Salt

Summary:
This change adds to the Salt state carp (roles/router/carp/init.sls) a secretsmith configuration file
on routers, allowing the script from T2276 to authenticate to Vault using AppRole.

The configuration file (/usr/local/etc/secrets/carp-secretsmith.yaml) contains:

  • Vault server URL
  • AppRole credentials (role_id and secret_id) retrieved from Vault

Ref T2276

Test Plan:

  • Applied state on router-002:

    salt 'router-002' state.apply roles/router test=True

    salt 'router-002' state.apply roles/router
  • Applied state on router-003:

    salt 'router-003' state.apply roles/router test=True

    salt 'router-003' state.apply roles/router

Reviewers: dereckson, Duranzed

Reviewed By: dereckson

Subscribers: Duranzed, dereckson

Maniphest Tasks: T2276

Differential Revision: https://devcentral.nasqueron.org/D4031

Details

Provenance
yousraAuthored on Mon, Mar 30, 07:16
yousraPushed on Mon, Mar 30, 07:22
Reviewer
dereckson
Differential Revision
D4031: Generate secretsmith Vault configuration for routers via Salt
Parents
rOPS88bee5959739: Sort more DevCentral projects in Notifications Center
Branches
Unknown
Tags
Unknown
References
HEAD -> main
Tasks
T2276: Automate CARP VIP MAC reassignment using devd and OVH API