This repository contains a script to export Secret ID data for Vault AppRoles and save it as a CSV file. The script retrieves authentication paths, roles, and associated Secret ID accessors, and then fetches Secret ID data for each accessor.
- Python 3.x
- Requests library (
pip install requests
)
-
Clone this repository to your local machine:
git clone https://github.com/brightblueray/vault-approle-expiration-reporting.git cd vault-approle-expiration-reporting
-
Set Environment Variables
export VAULT_ADDR="http://your-vault-address:8200" export VAULT_TOKEN="your-vault-token"
This repository includes Jupyter notebooks that help you set up test data using a bash kernel and demonstrate the execution of the script.
- 01_Approle_setup_bash.ipynb: Sets up test data for Vault using a bash kernel.
- 02_Approle_Secret_Expiration.ipynb: Demonstrates the execution of the secret ID data export script.
python3 vault-approle-report.py