super-duper-vault-train
super-duper-vault-train copied to clipboard
v6
// , Provisioning should use Configuration as Code
// , These are provisioned with shell scripts, which is a problematic way to do things for a lot of reasons.
We should still maintain the bash scripts versions. But using Chef would make a lot of things easier to test with Vault.
// , I've put the provisioning data in the provision_vault/data and provision_consul/data folders, and the scripts which use that data are in the provision_vault/scripts and provision_consul/scripts folders, respectively.
// , HERE BE DRAGONS.
Warning, this is more complex than other stuff in this repo. There are a lot of other solutions out there, and HashiCorp may already be working on one.
// , Here are some existing solutions to this, which automate the provisioning of Vault's internal features via its API:
https://www.hashicorp.com/blog/codifying-vault-policies-and-configuration
https://tech.spaceapegames.com/2017/07/26/vault-configuration-as-code/