Output the cli command to get the secret on exit

slarwise · Sep 20, 2024 · 4a12085 · 4a12085
1 parent 6a89e4c
commit 4a12085
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/internal/vault/client.go b/internal/vault/client.go
@@ -116,6 +116,7 @@ func (c Client) listDir(mount string, name string) ([]dirEnt, error) {
 
 type Secret struct {
 	Url  string `json:"url"`
+	Cli  string `json:"cli"`
 	Data struct {
 		Data     map[string]interface{} `json:"data"`
 		Metadata map[string]interface{} `json:"metadata"`
@@ -156,6 +157,7 @@ func (c Client) GetSecret(mount, name string) Secret {
 		panic(fmt.Errorf("Got %s on url %s", response.Status, url))
 	}
 	secret.Url = fmt.Sprintf("%s/ui/vault/secrets/%s/show%s", c.Addr, mount, name)
+	secret.Cli = fmt.Sprintf("vault kv get -mount=%s %s", mount, name)
 	cachedSecrets[name] = secret
 	return secret
 }

diff --git a/internal/vault/client_test.go b/internal/vault/client_test.go
@@ -81,6 +81,10 @@ func TestGetSecret(t *testing.T) {
 	if secret.Url != expectedUrl {
 		t.Fatalf("Expected url to be %s, got %s", expectedUrl, secret.Url)
 	}
+	expectedCli := "vault kv get -mount=secret /bar/baz"
+	if secret.Cli != expectedCli {
+		t.Fatalf("Expected cli command to be %s, got %s", expectedCli, secret.Cli)
+	}
 }
 
 func startVault(token, addr string) (*exec.Cmd, error) {