salt.runners.vault¶

Runner functions supporting the Vault modules. Configuration instructions are documented in the execution module docs.

salt.runners.vault.generate_token(minion_id, signature, impersonated_by_master=False)¶

Generate a Vault token for minion minion_id

minion_id: The id of the minion that requests a token
signature: Cryptographic signature which validates that the request is indeed sent by the minion (or the master, see impersonated_by_master).
impersonated_by_master: If the master needs to create a token on behalf of the minion, this is True. This happens when the master generates minion pillars.

salt.runners.vault.show_policies(minion_id)¶

Show the Vault policies that are applied to tokens for the given minion

CLI Example:

salt-run vault.show_policies myminion

salt.runners.vault.unseal()¶

Unseal Vault server

This function uses the 'keys' from the 'vault' configuration to unseal vault server

vault:

keys:

CLI Examples:

salt-run vault.unseal