pieterbreed/vault-workbench

vault/mysql test bench

Purpose: To test

• how we wrap vault-provided credentials
• using envconsul
• so that we honor various token and credential TTLs

how to use

Run using docker-compose up --force-recreate --build.

The mysql container leaves state behind. To reset all of the state(s), run docker-compose rm -f

what

• a mysql db server
• a vault server
• a script that configures the integration between vault and mysql
• a script that:
  • fetches mysql creds from vault using a hard-coded token-id
  • connects to mysql using those creds using the mysql cli, accessed via environment variables, put there by envconsul
  • loads some data
  • then run a query until you are tired of it...

We are trying to achieve a steady state where the mysql credentials don't expire, even while the various ttl's and leases have short values.