Rundeck Vault Storage Plugin

Purpose

This is a Storage Backend plugin for storing Key Store data in Vault.

Installation

• Download and start Rundeck. It will automatically create the necessary directories.
• Clone this repository. Build using gradle wrapper:

    ./gradlew clean build
  

• Drop rundeck-vault-plugin-<version>.jar to libext/ under Rundeck installation directory.
• Restart Rundeck.

Configuration

Add the following settings on $RDECK_BASE/etc/rundeck-config.properties

rundeck.storage.provider.1.type=vault-storage
rundeck.storage.provider.1.path=keys
rundeck.storage.provider.1.config.prefix=rundeck
rundeck.storage.provider.1.config.secretBackend=secret
rundeck.storage.provider.1.config.address=$VAULT_URL
rundeck.storage.provider.1.config.token=$VAULT_TOKEN

Minimal version requirements

• Java 1.8
• Rundeck 2.10.0
• Vault 0.9.0

Thanks

• BetterCloud/vault-java-driver made this possible.

TODO

• Integration tests
• Automated auth token lease renewal
• Storage converter plugin