vault

Consul Template version

v0.25.1

Expected behavior

Consul-template supports logging to file. Consul-template can be started as a service on Windows, and the resultant messages can be inspected. Consul offers -log-file via stdarg and Nomad offers log_file in the config.

Actual behavior

Consul-template only supports Syslog and stdout/stderr logging mechanisms. Windows d

Describe the solution you'd like

Current op command has a get item with --fields flag which makes it a lot simpler to extract values from details or section fields.

The output function can be used with this:

{{- output "op" "get" "item" "some-id" "--fields" "some-field" }}

But it might be nicer to have a built-in onepassworditemFields function (or something)

While reviewing our application logs, I have noticed a line that looked like this (redacted for obvious reasons).

{"level":50,"time":1605105915359,"pid":17,"hostname":"platform-kubernetes-external-secrets-578c5b47f4-gh4db","stack":"TypeError: Cannot use 'in' operator to search for 'DATABASE_PORT' in DATABASE_HOST=<redacted> DATABASE_PORT=3306 DATABASE_USER=<redacted> DATABASE_PASSWORD=<red

Is your feature request related to a problem? Please describe.
Vault has backends for AWS like dynamo and s3. However to use them you should provide credentials. AWS support 2 solutions to eliminate this. IAM roles for Service Accounts and Instance profile roles.
Due to some unknown reason vault requires more time to start when using dynamic creds than explicit definition keys in s3 block o

So there is currently an hvac.v1.Client.sys.list_mounted_secrets_engines() method.

However, for obvious reasons this will fail as it will attempt to list all mounted secrets engines (as it calls /v1/sys/mounts).

The web UI, however, shows what mounts the current token has access to.

While poking around the live API documentation the other day (`VAULT_BASE_URI/ui/vault/api-explorer

Currently pressing ctrl+c while scans are going on we get a big traceback.
It would be nice if we can handle that traceback and print something nice like Canceled by the user or something similar.

Read this to understand how to do it properly.