Token auth.
This commit is contained in:
+22
-2
@@ -14,13 +14,21 @@ inputs:
|
|||||||
description: "Vault url"
|
description: "Vault url"
|
||||||
required: true
|
required: true
|
||||||
|
|
||||||
|
HC_VAULT_AUTH:
|
||||||
|
description: "Specify preferred login method, e.g. token, userpass, etc."
|
||||||
|
required: true
|
||||||
|
|
||||||
HC_VAULT_USERNAME:
|
HC_VAULT_USERNAME:
|
||||||
description: "Vault login username"
|
description: "Vault login username"
|
||||||
required: true
|
required: false
|
||||||
|
|
||||||
HC_VAULT_PASSWORD:
|
HC_VAULT_PASSWORD:
|
||||||
description: "Vault login password"
|
description: "Vault login password"
|
||||||
required: true
|
required: false
|
||||||
|
|
||||||
|
HC_VAULT_TOKEN:
|
||||||
|
description: "Token for logging into and reading from Hashicorp Vault."
|
||||||
|
required: false
|
||||||
|
|
||||||
HC_VAULT_SECRETS_PATH:
|
HC_VAULT_SECRETS_PATH:
|
||||||
description: "Vault secrets path"
|
description: "Vault secrets path"
|
||||||
@@ -44,6 +52,7 @@ runs:
|
|||||||
|
|
||||||
- name: Login to Hashicorp Vault with userpass
|
- name: Login to Hashicorp Vault with userpass
|
||||||
shell: bash
|
shell: bash
|
||||||
|
if: contains(inputs.HC_VAULT_AUTH,'userpass')
|
||||||
env:
|
env:
|
||||||
VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }}
|
VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }}
|
||||||
VAULT_SKIP_VERIFY: "true"
|
VAULT_SKIP_VERIFY: "true"
|
||||||
@@ -54,6 +63,17 @@ runs:
|
|||||||
username=${{ inputs.HC_VAULT_USERNAME }} \
|
username=${{ inputs.HC_VAULT_USERNAME }} \
|
||||||
password=${{ inputs.HC_VAULT_PASSWORD }}
|
password=${{ inputs.HC_VAULT_PASSWORD }}
|
||||||
|
|
||||||
|
- name: Login to Hashicorp Vault with token
|
||||||
|
shell: bash
|
||||||
|
if: contains(inputs.HC_VAULT_AUTH,'token') ||
|
||||||
|
env:
|
||||||
|
VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }}
|
||||||
|
VAULT_SKIP_VERIFY: "true"
|
||||||
|
run: |
|
||||||
|
vault login \
|
||||||
|
-no-print \
|
||||||
|
-method=token
|
||||||
|
|
||||||
- name: Create env-file from Hashicorp Vault config
|
- name: Create env-file from Hashicorp Vault config
|
||||||
shell: bash
|
shell: bash
|
||||||
env:
|
env:
|
||||||
|
|||||||
Reference in New Issue
Block a user