Vault密码旋转编排器
Automates HashiCorp Vault secret rotation using the Vault HTTP API and dynamic secrets engines. Manages database credential leases, PKI certificate renewal, and AWS STS token rotation with zero-downtime rollover.
Installation
Use the upstream install or setup path that matches your environment:
- $ make bootstrap
- To compile a development version of Vault, run make or make dev. This will
- $ make dev
- To compile a development version of Vault with the UI, run make static-dist dev-ui. This will
Requirements and caveats from upstream:
- A modern system requires access to a multitude of secrets: database credentials, API keys for external services, credentials for service-oriented architecture communication, etc. Understanding who is accessing what se...
- To run tests, type make test. Note: this requires Docker to be installed. If
Basic usage or getting-started notes:
- systems, such as AWS or SQL databases. For example, when an application
- can revoke not only single secrets, but a tree of secrets, for example,
- Documentation, Getting Started, and Certification Exams
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/hashicorp/vault/HEAD/README.md