1 files changed, 69 insertions, 0 deletions

diff --git a/vault/simple_client.go b/vault/simple_client.go
new file mode 100644
index 0000000..560ebfe
--- /dev/null
+++ b/vault/simple_client.go
@@ -0,0 +1,69 @@
+package vault
+
+import (
+        "fmt"
+        "os"
+
+        "github.com/hashicorp/vault/api"
+        "github.com/mitchellh/mapstructure"
+)
+
+type Credential struct {
+        Username string `json:"username"`
+        Password string `json:"password"`
+}
+
+type VaultKey struct {
+        Data Credential `json:"data"`
+}
+
+func loginAndRead(path string) (*api.Secret, error) {
+        c, err := api.NewClient(api.DefaultConfig())
+        if err != nil {
+                return nil, err
+        }
+
+        lc := c.Logical()
+        s, err := lc.Write("auth/approle/login", map[string]interface{}{
+                "role_id":   os.Getenv("VAULT_ROLE_ID"),
+                "secret_id": os.Getenv("VAULT_SECRET_ID"),
+        })
+        if err != nil {
+                return nil, err
+        }
+
+        c.SetToken(s.Auth.ClientToken)
+
+        s, err = lc.Read(path)
+        if err != nil {
+                return nil, err
+        }
+
+        return s, nil
+}
+
+func GetVaultKey(path string) (Credential, error) {
+        s, err := loginAndRead(fmt.Sprintf("kv/data/%s", path))
+        if err != nil {
+                return Credential{}, err
+        }
+
+        var vk VaultKey
+        if err = mapstructure.Decode(s.Data, &vk); err != nil {
+                return Credential{}, err
+        }
+
+        return vk.Data, nil
+}
+
+func GetVaultDatabase(path string) (Credential, error) {
+        s, err := loginAndRead(path)
+        if err != nil {
+                return Credential{}, err
+        }
+
+        return Credential{
+                Username: s.Data["username"].(string),
+                Password: s.Data["password"].(string),
+        }, nil
+}