Files
vault-local-demo/README.md
2022-10-05 23:32:40 +02:00

968 B

Using the Form3 Grafana cloud Vault secrets backend

This project demonstrate the usage of the custom plugin, to issue short lived API tokens that applications can use to access the Grafana Cloud API.

The vault server is launched in dev mode, so it starts unsealed and automatically registers the vault-plugin-secrets-grafanacloud plugin.

Demo script

Run the make command with no arguments to launch vault and initialize the plugin.

In another terminal, run the make init to create an example Viewer role.

To fetch a new short lived token, launch: scripts/read_sole_cred.sh.

To revoke all the credentials issued during the demo, run the make revoke-all command.

Use case: pushing metrics to a Grafana Cloud prometheus instance

TODO

Use case: pushing traces to a Grafana Cloud Tempo instance

TODO