vault-editor

#!/bin/bash
#
# Aplicación para editar un KV secret version 2 en Vault
#

path=$1
tmpfile=$(mktemp)

# Fetch the secret and write it to a temporary file
vault kv get -format=json $path | jq -er .data.data > $tmpfile
# Print error if last command failed
if [ $? -ne 0 ]; then
  echo "Error fetching secret from Vault. See $tmpfile for details."
  exit 1
fi

# Open the temporary file in your favorite editor
nvim -c 'set filetype=json' $tmpfile

# Validate the JSON syntax
jq -e . $tmpfile > /dev/null
if [ $? -ne 0 ]; then
  echo "Invalid JSON syntax. See $tmpfile for details."
  exit 1
fi

# Write the modified secret back to Vault
vault kv put $path @$tmpfile

# Remove the temporary file
rm $tmpfile