homelab/script/generate-vault-secret

#!/usr/bin/env python

import requests
import secrets
import json
import os

class VaultSecret:
    def __init__(self,path: str,data: dict) -> None:
       self.path=path
       self.data=self.fill_empty_secret(data)

    @staticmethod
    def fill_empty_secret(data):
        for k,v in data.items():
            if v is None or v == "":
                data[k]=secrets.token_urlsafe(16)
        return data



class Vault:
    def __init__(self,url: str,token: str) -> None:
       self.URL=url
       self.token=token

    def create_vault_secret (self,secret: VaultSecret) -> None:
        resp=requests.post(
            url= f'{self.URL}v1/secrets/data/{secret.path}',
            headers={
                'X-Vault-Token': self.token
            },
            data=json.dumps({"data":secret.data,
                             "options": {"cas": 0}
                             })
        )
        print(resp.url)
        if resp.status_code == 200:
            print(f"Create {secret.path} done")
        else:
            print(resp.status_code)
            print(resp.content)


def main() -> None:

    listSecret={
        "nomad/ldap":{
            "admin":""
        },
        "nomad/gitea":{
            "internal_token":"",
            "jwt_secret":"",
            "secret_key":""
        }
    }

    token=os.getenv('VAULT_TOKEN',"")
    vault_addr=os.getenv('VAULT_ADDR',"")
    vault=Vault(vault_addr,token)
    for k,v in listSecret.items():
        secret=VaultSecret(k,v)
        vault.create_vault_secret(secret)

if __name__ == '__main__':
    main()