A systems integration framework, built to bring the benefits of configuration management to your entire infrastructure.

Official Vault plugin for Rails

Hiera backend for looking up secrets stored in Vault

A configuration engine combining environment variables, programmatic overrides and the power of hiera.

Adds support for using credentials from Hashicorp Vault

This is a CLI for easier use of https://www.vaultproject.io/

A HashiCorp Vault provider for the Configuration Service

Syncs content from the filesystem to the Consul KV store.

This plugin allows InSpec 'inputs' to be provided by a HashiCorp Vault installation. This enables you to unify your secrets management with your compliance automation.

# Sambot Sambot is our internal Platform Engineering toolchain to help standardize and simplify our DevOps workflow. It provides an executable with a variety of commands, grouped in various areas of functionality such as session management, DNS changes and cookbook management. ## Usage To install the gem, simply run `chef gem install sambot`. This will install the gem in your ChefDK installation. If you want to use it outside Chef, run `gem install sambot`. Run `chef exec sambot` to be shown the help menu. For help on specific commands, i.e. cookbook management and specific cookbook management commands, run `chef exec sambot help cookbook` or `chef exec sambot cookbook help generate` for example. ## Contributing Bug reports and pull requests are welcome on GitHub at https://github.exacttarget.com/ads-devops/sambot. ### Installation Make sure you have `ruby >= 2.4.0` installed. Install `bundler >= 1.15.1` by running `gem install bundler` Run `bundle install` from the root of the project to install the required Ruby gems. ### Running Sambot If you want to test your changes locally, you can run `bundle exec bin/sambot`. ### Running Tests Run `bundle exec rspec spec` to execute the unit tests. Run `cd integration_tests && bundle exec rspec .` to execute the integration tests. These require that you have Docker Compose available. ### Linting There is nothing here yet

Syncs encrypted content from the filesystem to the Vault secrets store.

Provide secrets either via ENV or fall back to secure backends like vault

Sensu Vault plugins

Authenticates a client & returns a Vault token

Given a master vault token, issue short-lived, per-application tokens to each app in a docker-compose.yml file, restricting each app the to corresponding security policy.

Scripts to verify / resolve secret manifest

Load secret and ssh certificate from Hashicorp Vault

ChatopsDeployer deploys containerized services in isolated VMs and exposes public facing URLs

Manage consul/vault backed template files in Ruby.

dev/vault bundles all of Hashicorp's platform-specific binaries for Vault and provides helpers to detect the local platform and run the right build.