salt.runners.vault

maintainer:SaltStack
maturity:new
platform:all

Runner functions supporting the Vault modules. Configuration instructions are documented in the execution module docs.

salt.runners.vault.generate_token(minion_id, signature, impersonated_by_master=False)

Generate a Vault token for minion minion_id

minion_id
The id of the minion that requests a token
signature
Cryptographic signature which validates that the request is indeed sent by the minion (or the master, see impersonated_by_master).
impersonated_by_master
If the master needs to create a token on behalf of the minion, this is True. This happens when the master generates minion pillars.
salt.runners.vault.show_policies(minion_id)

Show the Vault policies that are applied to tokens for the given minion

minion_id
The minions id

CLI Example:

salt-run vault.show_policies myminion
salt.runners.vault.unseal()

Unseal Vault server

This function uses the 'keys' from the 'vault' configuration to unseal vault server

vault:
keys:
  • n63/TbrQuL3xaIW7ZZpuXj/tIfnK1/MbVxO4vT3wYD2A
  • S9OwCvMRhErEA4NVVELYBs6w/Me6+urgUr24xGK44Uy3
  • F1j4b7JKq850NS6Kboiy5laJ0xY8dWJvB3fcwA+SraYl
  • 1cYtvjKJNDVam9c7HNqJUfINk4PYyAXIpjkpN/sIuzPv
  • 3pPK5X6vGtwLhNOFv1U2elahECz3HpRUfNXJFYLw6lid

CLI Examples:

salt-run vault.unseal