24 lines
613 B
Bash
Executable File
24 lines
613 B
Bash
Executable File
#!/bin/sh
|
|
|
|
set -euo pipefail
|
|
|
|
# vim: syntax=sh
|
|
|
|
export LC_ALL=C
|
|
VAULT_KV_PATH=/kv/service/mariadb
|
|
RAND_CMD="tr -dc A-Za-z0-9\-_\/=~\.+ < /dev/urandom | head -c 50"
|
|
if ! vault kv list $(dirname ${VAULT_KV_PATH}) 2>/dev/null | grep -q -E "^$(basename ${VAULT_KV_PATH})\$"; then
|
|
vault kv put ${VAULT_KV_PATH} \
|
|
vault_initial_pwd="$(sh -c "${RAND_CMD}")" \
|
|
root_pwd="$(sh -c "${RAND_CMD}")" \
|
|
|
|
fi
|
|
for SECRET in vault_initial_pwd root_pwd; do
|
|
if ! vault kv get -field ${SECRET} ${VAULT_KV_PATH} >/dev/null 2>&1; then
|
|
vault kv patch ${VAULT_KV_PATH} \
|
|
${SECRET}=$(sh -c "${RAND_CMD}")
|
|
fi
|
|
done
|
|
|
|
|