Commit 4e87a644 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

feat(vault): configurable Vault Secrets Provider image

parent b36b15b2

README.md

+1 −0
Original line number Diff line number Diff line
@@ -165,6 +165,7 @@ In order to be able to communicate with the Vault server, the variant requires t 


| Name              | description                            | default value     |

| ----------------- | -------------------------------------- | ----------------- |

| `TBC_VAULT_IMAGE` | The [Vault Secrets Provider](https://gitlab.com/to-be-continuous/tools/vault-secrets-provider) image to use (can be overridden) | `$CI_REGISTRY/to-be-continuous/tools/vault-secrets-provider:master` |

| `VAULT_BASE_URL`  | The Vault server base API url          | _none_ |

| :lock: `VAULT_ROLE_ID`   | The [AppRole](https://www.vaultproject.io/docs/auth/approle) RoleID | **must be defined** |

| :lock: `VAULT_SECRET_ID` | The [AppRole](https://www.vaultproject.io/docs/auth/approle) SecretID | **must be defined** |

kicker.json

+6 −0
Original line number Diff line number Diff line
@@ -57,6 +57,12 @@ 
      "description": "Retrieve secrets from a [Vault](https://www.vaultproject.io/) server",

      "template_path": "templates/gitlab-ci-helm-vault.yml",

      "variables": [

        {

          "name": "TBC_VAULT_IMAGE",

          "description": "The [Vault Secrets Provider](https://gitlab.com/to-be-continuous/tools/vault-secrets-provider) image to use",

          "default": "$CI_REGISTRY/to-be-continuous/tools/vault-secrets-provider:master",

          "advanced": true

        },

        {

          "name": "VAULT_BASE_URL",

          "description": "The Vault server base API url"

templates/gitlab-ci-robotframework-vault.yml

+8 −1
Original line number Diff line number Diff line
@@ -4,9 +4,16 @@ 
# Vault variables will have to be explicitly declared in the YAML to be exported to the service, but since we don't

# know which authentication method will be used (AppRole or JWT), that will have to be done by the including project.



variables:

  # variabilized vault-secrets-provider image

  TBC_VAULT_IMAGE: "$CI_REGISTRY/to-be-continuous/tools/vault-secrets-provider:master"

  # variables have to be explicitly declared in the YAML to be exported to the service

  VAULT_ROLE_ID: "$VAULT_ROLE_ID"

  VAULT_SECRET_ID: "$VAULT_SECRET_ID"



.robotframework-base:

  services:

    - name: "$TBC_TRACKING_IMAGE"

      command: ["--service", "robotframework", "3.1.0" ]

    - name: "$CI_REGISTRY/to-be-continuous/tools/vault-secrets-provider:master"

    - name: "$TBC_VAULT_IMAGE"

      alias: "vault-secrets-provider"