forattini-dev/Vaulter - Pull Secrets
Pull environment variables from Vaulter backend and generate outputs for kubectl, helm, terraform, and more
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| backend | Connection string (s3://bucket, file://path, memory://). Can also use VAULTER_BACKEND env var. | no | — |
| passphrase | Encryption passphrase for symmetric mode. Can also use VAULTER_PASSPHRASE env var. | no | — |
| project | Project name | yes | — |
| environment | Environment (dev/stg/prd or custom) | yes | — |
| service | Service name for monorepo setups | no | — |
| outputs | Comma-separated list of outputs to generate: env,json,k8s-secret,k8s-configmap,helm-values,tfvars,shell | — | env |
| env-path | Path for .env file output | — | .env |
| json-path | Path for JSON output | — | vaulter-vars.json |
| k8s-secret-path | Path for Kubernetes Secret YAML | — | k8s-secret.yaml |
| k8s-configmap-path | Path for Kubernetes ConfigMap YAML | — | k8s-configmap.yaml |
| helm-values-path | Path for Helm values.yaml | — | helm-values.yaml |
| tfvars-path | Path for Terraform .tfvars file | — | terraform.auto.tfvars |
| shell-path | Path for shell export script | — | vaulter-env.sh |
| k8s-secret-name | Name for Kubernetes Secret resource | no | — |
| k8s-configmap-name | Name for Kubernetes ConfigMap resource | no | — |
| k8s-namespace | Kubernetes namespace | — | default |
| encryption-mode | Encryption mode: symmetric or asymmetric | — | symmetric |
| public-key | Public key PEM content (asymmetric mode) | no | — |
| private-key | Private key PEM content (asymmetric mode) | no | — |
| asymmetric-algorithm | Algorithm for asymmetric mode: rsa-4096, rsa-2048, ec-p256, ec-p384 | — | rsa-4096 |
| include-shared | Include shared variables when service is specified | — | true |
| export-to-env | Export variables to GITHUB_ENV for subsequent steps | — | false |
| mask-values | Mask secret values in logs | — | true |
Outputs
| name | description |
|---|---|
| env-file | Path to generated .env file |
| json-file | Path to generated JSON file |
| k8s-secret-file | Path to generated Kubernetes Secret YAML |
| k8s-configmap-file | Path to generated Kubernetes ConfigMap YAML |
| helm-values-file | Path to generated Helm values file |
| tfvars-file | Path to generated Terraform .tfvars file |
| shell-file | Path to generated shell export script |
| vars-count | Number of variables exported |
| vars-json | JSON string with all variable names (not values) |