VAULT-READER

A GitHub Action to read all keys/values of secret from Vault as JSON.

Usage

name: Read secret
on:
  push:
    branches:
      - "*"
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Write to file
        uses: Ahton89/vault-reader@v0.0.1
        with:
          vault_addr: ${{ secrets.VAULT_ADDR }}
          vault_path: ${{ secrets.VAULT_PATH }}
          vault_role_id: ${{ secrets.VAULT_ROLE_ID }}
          vault_secret_id: ${{ secrets.VAULT_SECRET_ID }}

📥 Inputs

Vault

• vault_addr (required) - Vault address.
• vault_path (required) - Path to the secret
• vault_role_id (required) - Role id for auth in the Vault
• vault_secret_id (required) - Secret id for auth in the Vault
• vault_secret_version (optional) - If empty - uses last version of secret.
• to_base64 (optional) - Convert JSON string to BASE64 string.

📤 Outputs

• data - Generated JSON string (or JSON string in BASE64 if to_base64 is true) from vault secret.

{"secret_1_key":"secret_1_value","secret_2_key":"secret_2_value", ...}
or 
eyJzZWNyZXRfMV9rZXkiOiJzZWNyZXRfMV92YWx1ZSIsInNlY3JldF8yX2tleSI6InNlY3JldF8yX3ZhbHVlIn0K

Created with ❤️ for everyone :)