Browse Source

Use curl in vault_cli.sh, not vault binary

vault binary is not in a Docker image but curl is.
So it will be possible to do deployment from a Docker container.
pull/2919/head
Sergey Pashinin 6 years ago
parent
commit
1ef8c0d371
  1. 1
      Dockerfile
  2. 23
      deploy/vault_cli.sh

1
Dockerfile

@ -8,6 +8,7 @@ RUN apk update -f \
bind-tools \ bind-tools \
curl \ curl \
socat \ socat \
sed \
tzdata \ tzdata \
oath-toolkit-oathtool \ oath-toolkit-oathtool \
tar \ tar \

23
deploy/vault_cli.sh

@ -43,19 +43,22 @@ vault_cli_deploy() {
return 1 return 1
fi fi
VAULT_CMD=$(which vault)
if [ ! $? ]; then
_err "cannot find vault binary!"
return 1
fi
# JSON does not allow multiline strings.
# So replacing new-lines with "\n" here
_ckey=$(cat "$2" | sed -z 's/\n/\\n/g')
_ccert=$(cat "$3" | sed -z 's/\n/\\n/g')
_cca=$(cat "$4" | sed -z 's/\n/\\n/g')
_cfullchain=$(cat "$5" | sed -z 's/\n/\\n/g')
URL="$VAULT_ADDR/v1/$VAULT_PREFIX/$_cdomain"
if [ -n "$FABIO" ]; then if [ -n "$FABIO" ]; then
$VAULT_CMD write "${VAULT_PREFIX}/${_cdomain}" cert=@"$_cfullchain" key=@"$_ckey" || return 1
curl --silent -H "X-Vault-Token: $VAULT_TOKEN" --request POST --data "{\"cert\": \"$_cfullchain\", \"key\": \"$_ckey\"}" $URL || return 1
else else
$VAULT_CMD write "${VAULT_PREFIX}/${_cdomain}/cert.pem" value=@"$_ccert" || return 1
$VAULT_CMD write "${VAULT_PREFIX}/${_cdomain}/cert.key" value=@"$_ckey" || return 1
$VAULT_CMD write "${VAULT_PREFIX}/${_cdomain}/chain.pem" value=@"$_cca" || return 1
$VAULT_CMD write "${VAULT_PREFIX}/${_cdomain}/fullchain.pem" value=@"$_cfullchain" || return 1
curl --silent -H "X-Vault-Token: $VAULT_TOKEN" --request POST --data "{\"value\": \"$_ccert\"}" "$URL/cert.pem" || return 1
curl --silent -H "X-Vault-Token: $VAULT_TOKEN" --request POST --data "{\"value\": \"$_ckey\"}" "$URL/cert.key" || return 1
curl --silent -H "X-Vault-Token: $VAULT_TOKEN" --request POST --data "{\"value\": \"$_cca\"}" "$URL/chain.pem" || return 1
curl --silent -H "X-Vault-Token: $VAULT_TOKEN" --request POST --data "{\"value\": \"$_cfullchain\"}" "$URL/fullchain.pem" || return 1
fi fi
} }
Loading…
Cancel
Save