A few options exist for Windows already, allowing FUSE filesytem code an easy path to run on Windows. I've recently used winfsp + it's sshfs port, and it works pretty well.
It seems, to me, like a normal command line tool that has the operations you want would integrate better with workflows. Here you can use “-c” but then you’d have to deal with quoting and such. Seems like a big impedance mismatch to pay for “working directory” functionality.
... I don’t have a super tree of Vault secrets though (it’s one level, actually).
The "-c" is mainly intended for automation if needed.
Main motivation behind this project is that I am currently working with rather large secret trees and will have to move them around for upcoming refactors. I could also write scripts for that with the vault client of course .. but it felt to me easier and more flexible on the long-run to have a shell-like approach to work with.
In my case, the refactor will include a shift from KV1 to KV2, which is also covered by that tool.
Further, I saw this as an opportunity to do some coding :)
Very cool! I have a very similar (non-interactive) project for copy/move/search on folders. It's something I think should be added to the vault core but there doesn't seem to be much interest there.
16 comments
[ 3.0 ms ] story [ 46.5 ms ] threadAfaik Mac and Unix should be supported by FUSE, so it seems like a viable option.
https://dokan-dev.github.io/
A few options exist for Windows already, allowing FUSE filesytem code an easy path to run on Windows. I've recently used winfsp + it's sshfs port, and it works pretty well.
Are there any reasonable go libraries for FUSE that you can recommend?
https://github.com/hashicorp/vault/pull/6108
... I don’t have a super tree of Vault secrets though (it’s one level, actually).
The "-c" is mainly intended for automation if needed.
Main motivation behind this project is that I am currently working with rather large secret trees and will have to move them around for upcoming refactors. I could also write scripts for that with the vault client of course .. but it felt to me easier and more flexible on the long-run to have a shell-like approach to work with. In my case, the refactor will include a shift from KV1 to KV2, which is also covered by that tool.
Further, I saw this as an opportunity to do some coding :)
https://github.com/jboero/hashifuse
https://github.com/lingrino/vaku
Thank you for sharing