{"id":6572,"date":"2022-10-14T22:54:37","date_gmt":"2022-10-14T13:54:37","guid":{"rendered":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=6572"},"modified":"2022-10-17T12:12:06","modified_gmt":"2022-10-17T03:12:06","slug":"vault-cluster-with-consul","status":"publish","type":"post","link":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=6572","title":{"rendered":"Run Vault with Consul"},"content":{"rendered":"<h1>Run Vault with Consul<\/h1>\n<p>Vault \ub97c \uac1c\ubc1c\ubaa8\ub4dc\ub85c \uc2e4\ud589\ud558\uba74 \ubaa8\ub4e0 \ub370\uc774\ud0c0\ub294 \uba54\ubaa8\ub9ac\uc5d0 \uc800\uc7a5\ub418\uace0,<br \/>\n\uc11c\ubc84\uac00 \uc7ac\uc2dc\uc791\ub418\uc5c8\uc744 \ub54c \ubaa8\ub4e0 \ub370\uc774\ud0c0\uac00 \uc99d\ubc1c\ud569\ub2c8\ub2e4.<\/p>\n<h2>Vault, Consul \uc124\uce58<\/h2>\n<p><a href=\"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=6584\">\uc5ec\uae30<\/a> \ub97c \ucc38\uc870\ud558\uc5ec Vault, Consul \uc744 \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n<h2>Vault \uc124\uc815<\/h2>\n<pre><code class=\"language-bash\">export VAULT_ADDR=&#039;http:\/\/127.0.0.1:8200&#039;<\/code><\/pre>\n<pre><code class=\"language-bash\">vault status<\/code><\/pre>\n<pre><code class=\"language-bash\">vault login &lt;Root Token&gt;<\/code><\/pre>\n<pre><code class=\"language-bash\">vault secrets list\nvault secrets enable -path=team1 kv\nvault secrets list<\/code><\/pre>\n<pre><code class=\"language-bash\">vault kv put team1\/foo bar=baz\nvault kv list team1\nvault kv get team1\/foo<\/code><\/pre>\n<pre><code class=\"language-bash\">vault policy list<\/code><\/pre>\n<pre><code class=\"language-bash\">vi team1-policy.cfg\n-----------------------\npath &quot;team1\/*&quot; {\n  capabilities = [&quot;create&quot;, &quot;update&quot;]\n}\n\npath &quot;team1\/foo&quot; {\n  capabilities = [&quot;read&quot;]\n}\n-----------------------<\/code><\/pre>\n<pre><code class=\"language-bash\">vault policy write team1-policy team1-policy.cfg\nvault policy list<\/code><\/pre>\n<pre><code class=\"language-bash\">vault auth list\nvault auth enable approle\nvault auth list\n\nvault write auth\/approle\/role\/team1-role \\\nsecret_id_ttl=10m \\\ntoken_num_uses=10 \\\ntoken_ttl=20m \\\ntoken_max_ttl=30m \\\nsecret_id_num_uses=40 \\\ntoken_policies=team1-policy<\/code><\/pre>\n<pre><code class=\"language-bash\">vault list auth\/approle\/role\nvault read auth\/approle\/role\/team1-role\n\n# get id(role-id)\nvault read auth\/approle\/role\/team1-role\/role-id\nvault read -field=role_id auth\/approle\/role\/team1-role\/role-id\n\n# get password(secret-id)\nvault write -f -field=secret_id auth\/approle\/role\/team1-role\/secret-id<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Run Vault with Consul Vault \ub97c \uac1c\ubc1c\ubaa8\ub4dc\ub85c \uc2e4\ud589\ud558\uba74 \ubaa8\ub4e0 \ub370\uc774\ud0c0\ub294 \uba54\ubaa8\ub9ac\uc5d0 \uc800\uc7a5\ub418\uace0, \uc11c\ubc84\uac00 \uc7ac\uc2dc\uc791\ub418\uc5c8\uc744 \ub54c \ubaa8\ub4e0 \ub370\uc774\ud0c0\uac00 \uc99d\ubc1c\ud569\ub2c8\ub2e4. Vault, Consul \uc124\uce58 \uc5ec\uae30 \ub97c \ucc38\uc870\ud558\uc5ec Vault, Consul \uc744 \uc124\uce58\ud569\ub2c8\ub2e4. Vault \uc124\uc815 export VAULT_ADDR=&#039;http:\/\/127.0.0.1:8200&#039; vault status vault login &lt;Root Token&gt; vault secrets list vault secrets enable -path=team1 kv vault secrets list vault kv put team1\/foo bar=baz vault\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=6572\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-6572","post","type-post","status-publish","format-standard","hentry","category-nomad"],"_links":{"self":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6572","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6572"}],"version-history":[{"count":11,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6572\/revisions"}],"predecessor-version":[{"id":6598,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6572\/revisions\/6598"}],"wp:attachment":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6572"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6572"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6572"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}