sjparkinson/vdot

Consider support for VAULT_ROLE_ID and VAULT_SECRET_ID environment variables

sjparkinson opened this issue · 2 comments

https://www.vaultproject.io/docs/auth/approle.html

Will this be helpful, or should something else generate a token from these environment variables?

VAULT_ROLE_ID and VAULT_SECRET_ID are not standard Vault CLI environment variables, https://www.vaultproject.io/docs/commands/#environment-variables.

Worth considering the need, in an ideal world, of using a trusted entity to provide a system with the secret ID.

https://learn.hashicorp.com/vault/identity-access-management/iam-authentication#advanced-features

This isn't something I'd expect to be used in production with access to a Vault app role.