Strongbox is a small add-on for Vault and safe that aims to make it easier for safe to reason about the reachability of backend Vault nodes, given their seal-status, without having to expose something like consul to the outside world.
The API is dead simple.
{
"https://10.244.4.2": "unsealed",
"https://10.244.4.3": "sealed",
"https://10.244.4.4": "sealed"
}
That's it. That's all there is too it. In a nutshell,
strongbox takes the specifications from the consul, and
delivers them to the safe CLI.
Configuration is likewise simple:
strongbox \
--bind 0.0.0.0:8180 \
--consul https://127.0.0.1:8500 \
--no-verify \
--ca-cert /path/to/ca.pem