From 0f7fb1557df9704c791191bbffd6aa6ab9f2d571 Mon Sep 17 00:00:00 2001 From: Igor I Shatunov Date: Thu, 19 Jan 2023 21:36:14 +0000 Subject: [PATCH] Add 'main.py' --- main.py | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 main.py diff --git a/main.py b/main.py new file mode 100644 index 0000000..22c036a --- /dev/null +++ b/main.py @@ -0,0 +1,27 @@ +import os +from hvac import Client +from hvac.api.auth_methods import Kubernetes + +VAULT_URL = os.environ['VAULT_ADDR'] +VAULT_ROLE = os.environ['VAULT_ROLE'] +VAULT_PATH = os.environ['VAULT_PATH'] +VAULT_MOUNT = 'kubernetes' +SECRET_NAME = 'MY_SERCRECT' + +print(VAULT_URL) +print(VAULT_ROLE) + +client = Client(url=VAULT_URL) + +token = open('/var/run/secrets/kubernetes.io/serviceaccount/token') + +jwt = token.read() + +Kubernetes(client.adapter).login( + role = VAULT_ROLE, + jwt = jwt, + mount_point=VAULT_MOUNT +) + +secret = client.read(VAULT_PATH) +print(secret['data']['data'][SECRET_NAME]) \ No newline at end of file