vault_kv_put

Goal

Interacts by API calls with a vault cluster to write data onto a kv-v2 datastore.

Usage

• Launch from a directory that contains inventory and variables of the deployed Vault cluster.

> export VAULT_TOKEN="..."
> ansible-playbook wescale.hashistack.vault_kv_put  \
>        -e hs_vault_key_mount=...  \
>        -e hs_vault_key_name=...   \
>        -e @data.yml

TODO: example data

Target vault url

The playbook reads the hashistack group vars to retrieve hs_vault_external_url for vault url. Force the variable hs_vault_external_url with an extra var if you like to target a custom address.

Variables

The playbook targets by default the first host group hashistack_masters for coherent var loading. If you decided to name your master group differently, you can override this by setting hs_masters_group on extra var. This is only for variable loading, no actual operation will occur on the hosts of the group.

- hosts: "{{ hs_masters_group | default('hashistack_masters') }}[0]"

---

Mount point of the targeted kv-v2 backend engine.

hs_vault_key_mount: 'kv-v2'

---

Name of the targeted key inside the kv-v2 backend.

hs_vault_key_name: 'hs_demo/custom_kv'

---

Name of the targeted key inside the kv-v2 backend.

hs_vault_data:
  written_by: "hashistack"