cruise-automation / daytona

A Vault client, but for containers and servers.
Apache License 2.0
310 stars 33 forks source link

Rudimentary support for KV version 2 #35

Open broamski opened 4 years ago

broamski commented 4 years ago

The vault go api client doesn't discern between kv 1 and kv 2 as the vault binary is responsible for assembling the proper api paths to be called, so we must rely on DAYTONA consumers to do the same.

For example: vault kv list secret/whatever is actually performing a list on secret/metadata/whatever. So a KV version 2 path walk in DAYTONA would be supplied as: VAULT_SECRETS_MANY=secret/metadata/stuff, while a single secret is defined as VAULT_SECRET_SINGLE=secret/data/mysecret