Verified Commit 65606553 authored by Xueshan Feng's avatar Xueshan Feng
Browse files

update vault mount-* to vault vault secretes (v0.10.1).

parent 9fa01fb8

create_ca.sh

+3 −3
Original line number Diff line number Diff line
@@ -93,11 +93,11 @@ root_token=$(get_root_token) 
vault auth $root_token



# Mount pki path

if vault mounts | grep ^$pki_path | grep pki; then

if vault secrets list | grep ^$pki_path | grep pki; then

    echo "$pki_path PKI backend already mounted. Skipping re-mount"

else

    vault mount -path=$pki_path -description="$description" -max-lease-ttl=$ttl pki

    vault mount-tune -max-lease-ttl=87600h $pki_path

    vault secrets enable -path=$pki_path -description="$description" -max-lease-ttl=$ttl pki

    vault secrets tune -max-lease-ttl=87600h $pki_path

fi



# Check if it already exist.

makefile_parts/vault.mk

+1 −1
Original line number Diff line number Diff line
@@ -27,7 +27,7 @@ vault-login-token: ## vault login with token backend 
	${SCRIPTS_DIR}/vault-login.sh



.PHONY: vault-show-mounts

vault-show-mounts:  ## list vault mounts

vault-show-mounts: vault-login ## list vault mounts

	@${SCRIPTS_DIR}/vault-show-mounts.sh



vault-show-auth:  ## list vault auth backend

mount-sys-backend.sh

+2 −2
Original line number Diff line number Diff line
@@ -34,9 +34,9 @@ provision -c check_parent_list -u do_nothing sys/auth/*.json 


# MOUNT OTHER backends

provision -c check_parent_list -u do_nothing sys/mounts/*.json

vault mount-tune -max-lease-ttl=87600h pki

vault secrets tune -max-lease-ttl=87600h pki



# Tune TTL for ldap token

vault mount-tune -default-lease-ttl=24h /auth/ldap

vault secrets tune -default-lease-ttl=24h /auth/ldap



popd > /dev/null