2018-11-05 20:24:39 +00:00
|
|
|
#!/bin/sh
|
|
|
|
|
|
|
|
|
|
set -e
|
|
|
|
|
|
|
|
|
|
# Generate an OpenAPI document for all backends.
|
|
|
|
|
#
|
|
|
|
|
# Assumptions:
|
|
|
|
|
#
|
|
|
|
|
# 1. Vault has been checked out at an appropriate version and built
|
|
|
|
|
# 2. vault executable is in your path
|
2018-11-30 00:08:44 +00:00
|
|
|
# 3. Vault isn't already running
|
2018-11-05 20:24:39 +00:00
|
|
|
|
|
|
|
|
echo "Starting Vault..."
|
|
|
|
|
if pgrep -x "vault" > /dev/null
|
|
|
|
|
then
|
|
|
|
|
echo "Vault is already running. Aborting."
|
|
|
|
|
exit 1
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
vault server -dev -dev-root-token-id=root &
|
|
|
|
|
sleep 2
|
|
|
|
|
VAULT_PID=$!
|
|
|
|
|
|
|
|
|
|
echo "Mounting all builtin backends..."
|
|
|
|
|
|
|
|
|
|
# auth backends
|
|
|
|
|
vault auth enable alicloud
|
|
|
|
|
vault auth enable app-id
|
|
|
|
|
vault auth enable approle
|
|
|
|
|
vault auth enable aws
|
|
|
|
|
vault auth enable azure
|
|
|
|
|
vault auth enable centrify
|
|
|
|
|
vault auth enable cert
|
|
|
|
|
vault auth enable gcp
|
|
|
|
|
vault auth enable github
|
|
|
|
|
vault auth enable jwt
|
|
|
|
|
vault auth enable kubernetes
|
|
|
|
|
vault auth enable ldap
|
|
|
|
|
vault auth enable okta
|
|
|
|
|
vault auth enable radius
|
|
|
|
|
vault auth enable userpass
|
|
|
|
|
|
|
|
|
|
# secrets backends
|
|
|
|
|
vault secrets enable ad
|
|
|
|
|
vault secrets enable alicloud
|
|
|
|
|
vault secrets enable aws
|
|
|
|
|
vault secrets enable azure
|
|
|
|
|
vault secrets enable cassandra
|
|
|
|
|
vault secrets enable consul
|
|
|
|
|
vault secrets enable database
|
|
|
|
|
vault secrets enable gcp
|
|
|
|
|
vault secrets enable kv
|
|
|
|
|
vault secrets enable mongodb
|
|
|
|
|
vault secrets enable mssql
|
|
|
|
|
vault secrets enable mysql
|
|
|
|
|
vault secrets enable nomad
|
|
|
|
|
vault secrets enable pki
|
|
|
|
|
vault secrets enable postgresql
|
|
|
|
|
vault secrets enable rabbitmq
|
|
|
|
|
vault secrets enable ssh
|
|
|
|
|
vault secrets enable totp
|
|
|
|
|
vault secrets enable transit
|
|
|
|
|
|
|
|
|
|
curl -H "X-Vault-Token: root" "http://127.0.0.1:8200/v1/sys/internal/specs/openapi" > openapi.json
|
|
|
|
|
|
|
|
|
|
kill $VAULT_PID
|
|
|
|
|
sleep 1
|
|
|
|
|
|
|
|
|
|
echo "\nopenapi.json generated."
|
