Différences

Ci-dessous, les différences entre deux révisions de la page.

--- tech:notes_hashicorp_vault [2026/09/09 17:55] – Jean-Baptiste
+++ tech:notes_hashicorp_vault [2026/09/10 15:36] (Version actuelle) – Jean-Baptiste
@@ Ligne 57: / Ligne 57: @@
 ~~~bash
-vault(){ docker exec -ti -e VAULT_ADDR='http://127.0.0.1:8200' -e VAULT_TOKEN=hvs.pSSg3pM9pfk5Ih6HdCi784un dev-vault vault $@ ;}
+#vault(){ docker exec -ti -e VAULT_ADDR='http://127.0.0.1:8200' -e VAULT_TOKEN=hvs.pSSg3pM9pfk5Ih6HdCi784un dev-vault vault $@ ;}
+vault(){ podman run --cap-add IPC_LOCK --rm -v /etc/ssl/certs/:/etc/ssl/certs/:ro -e VAULT_ADDR='https://vault.acme.local' -e VAULT_TOKEN='hvs.CAESxxxxxxxxx' docker.io/library/vault:0.11.6 vault $@ ;}
 vault --version
+vault status
 vault token lookup
 ~~~
@@ Ligne 73: / Ligne 76: @@
 ~~~
+## Ansible
+~~~bash
+export VAULT_TOKEN=hvs.CAESIxxxxxxxxxxx
+~~~~
+~~~yaml
+#! /usr/bin/env ansible-playbook
+---
+- name: Test Vault
+  hosts: localhost
+  gather_facts: false
+  tasks:
+    - name: Get Vault
+      community.hashi_vault.vault_kv2_get:
+        url: https://vault.acme.local
+        ca_cert: /etc/ssl/certs/
+        engine_mount_point: acme
+        path: plop
+      register: hv_plop
+    - name: Test - afficher MDP
+      ansible.builtin.debug:
+        msg: "user: {{ plop_user }} ; pass {{ plop_pass }}"
+      vars:
+        plop_user: "{{ (hv_plop.secret.keys() | list)[0] }}"
+        plop_pass: "{{ (hv_plop.secret.values() | list)[0] }}"
+~~~