Expand description
Thin Vault HTTP client. Authenticates via OIDC/JWT against a
per-site jwt-manta-<site> role, then reads K/V v2 secrets under
manta/data/<...>.
Functions§
- auth_
oidc_ jwt - Authenticate to Vault using a JWT token and return a Vault client token.
- fetch_
secret - Fetch a secret from Vault’s KV store at
secret_path. - fetch_
shasta_ k8s_ secrets_ from_ vault - Retrieve Kubernetes secrets (API URL, token, CA cert) from Vault.
- fetch_
shasta_ vcs_ token - Retrieve the Gitea VCS token from Vault.