vault-sync
vault-sync copied to clipboard
cloudwatt
CLI tool to sync dynamic configuration from files to Hashicorp Vault
This is a sync tool. Having the `--delete` flag makes sense if you want to have some kind of (partial) dry-run, but `--sync-full` seems redundant. However it is "useful" right...
In particular there are a certain number of objects that accept arbitrary `attributes`. We do get some input validation from Vault, but it might be nice to add a readback...
There are many config flags inherited from `vaultctl` for the sync command. We can probably do a better Job at deducing the intent of the user from the actual input...