Verified Commit c0d7bd91 authored by Xueshan Feng's avatar Xueshan Feng
Browse files

use vault cli kc commmand to get duo ikey etc. no longer use curl_vault.

parent c743cbc0

provision-ldap.sh

+4 −4
Original line number Diff line number Diff line 
#!/bin/bash

#!/bin/bash -e



# THIS SCRIPT requires the following paths to contain values:

# - secret/global/<aws-profile>/vault/<dev|prod|stage>/duo/{ikey,skey,host}
@@ -25,9 +25,9 @@ pushd $data_dir > /dev/null 


# DUO VARIABLES

# used when setting up mfa in userpass and ldap backends

ikey=$(curl_vault ${VAULT_ADDR}/v1/${DUO_SEC_PATH}/ikey | jq -er .data.data.value)

skey=$(curl_vault ${VAULT_ADDR}/v1/${DUO_SEC_PATH}/skey | jq -er .data.data.value)

host=$(curl_vault ${VAULT_ADDR}/v1/${DUO_SEC_PATH}/host | jq -er .data.data.value)

ikey=$(vault kv get --address=${VAULT_ADDR} --format=json ${DUO_SEC_PATH}/ikey | jq -er .data.value)

skey=$(vault kv get --address=${VAULT_ADDR} --format=json ${DUO_SEC_PATH}/skey | jq -er .data.value)

host=$(vault kv get --address=${VAULT_ADDR} --format=json ${DUO_SEC_PATH}/host | jq -er .data.value)

# export variables so they can be used by envsubst

export ikey skey host