Usage with consul-template

[kakoni]

Hi and thanks for the interesting tool.

Have I understood the use case correctly,

1. I would use approle-login tool output vault-token into file
2. Then use this token file together with consul-template to render secrets into templates?

[jsoriano]

Hi @kakoni,

Yes, you can use approle-login to login using the approle method and then use the obtained token with other tools as consul-template.

For some cases you can use pouch directly for everything, it runs as a daemon and it can login using the approle method (or use an existing token) and automatically renovate the token if needed. It can obtain secrets from vault and use them with templates to render configuration files. If secrets expire, 'pouch` also takes care of renovating them and update the files. It also allows to trigger notifications when files change, what can be used for example to restart services.