90 lines
2.0 KiB
Bash
Executable File
90 lines
2.0 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
set -e
|
|
|
|
# Generate an OpenAPI document for all backends.
|
|
#
|
|
# Assumptions:
|
|
#
|
|
# 1. Vault has been checked out at an appropriate version and built
|
|
# 2. vault executable is in your path
|
|
# 3. Vault isn't already running
|
|
|
|
echo "Starting Vault..."
|
|
if pgrep -x "vault" > /dev/null
|
|
then
|
|
echo "Vault is already running. Aborting."
|
|
exit 1
|
|
fi
|
|
|
|
vault server -dev -dev-root-token-id=root &
|
|
sleep 2
|
|
VAULT_PID=$!
|
|
|
|
echo "Mounting all builtin backends..."
|
|
|
|
# auth backends
|
|
vault auth enable alicloud
|
|
vault auth enable app-id
|
|
vault auth enable approle
|
|
vault auth enable aws
|
|
vault auth enable azure
|
|
vault auth enable centrify
|
|
vault auth enable cert
|
|
vault auth enable cf
|
|
vault auth enable gcp
|
|
vault auth enable github
|
|
vault auth enable jwt
|
|
vault auth enable kerberos
|
|
vault auth enable kubernetes
|
|
vault auth enable ldap
|
|
vault auth enable oci
|
|
vault auth enable oidc
|
|
vault auth enable okta
|
|
vault auth enable radius
|
|
vault auth enable userpass
|
|
|
|
# secrets backends
|
|
vault secrets enable ad
|
|
vault secrets enable alicloud
|
|
vault secrets enable aws
|
|
vault secrets enable azure
|
|
vault secrets enable cassandra
|
|
vault secrets enable consul
|
|
vault secrets enable database
|
|
vault secrets enable gcp
|
|
vault secrets enable gcpkms
|
|
vault secrets enable kv
|
|
vault secrets enable mongodb
|
|
vault secrets enable mongodbatlas
|
|
vault secrets enable mssql
|
|
vault secrets enable mysql
|
|
vault secrets enable nomad
|
|
vault secrets enable openldap
|
|
vault secrets enable pki
|
|
vault secrets enable postgresql
|
|
vault secrets enable rabbitmq
|
|
vault secrets enable ssh
|
|
vault secrets enable totp
|
|
vault secrets enable transit
|
|
|
|
# Enterprise backends
|
|
VERSION=$(vault status -format=json | jq -r .version)
|
|
|
|
if [[ $VERSION =~ prem|ent ]]
|
|
then
|
|
vault secrets enable kmip
|
|
fi
|
|
|
|
# Output OpenAPI, optionally formatted
|
|
if [ "$1" == "-p" ]; then
|
|
curl -H "X-Vault-Token: root" "http://127.0.0.1:8200/v1/sys/internal/specs/openapi" | jq > openapi.json
|
|
else
|
|
curl -H "X-Vault-Token: root" "http://127.0.0.1:8200/v1/sys/internal/specs/openapi" > openapi.json
|
|
fi
|
|
|
|
kill $VAULT_PID
|
|
sleep 1
|
|
|
|
echo "\nopenapi.json generated."
|