devbao

devbao is a CLI utility to start OpenBao and HashiCorp Vault instances for development purposes.

Building

To build and run:

make bin
./bin/devbao

Because devbao is a static Go binary, it should be relocatable to go on $PATH.

Data is presently stored in $HOME/.local/share/devbao.

Refer to devbao help for more information about commands currently implemented.

TODO

Below are rough sketches of functionality that could potentially be in devbao in the future.

Feel free to comment on the issue tracker if things are of particular interest!

• Nodes
  • Start node
    • Auto-initialize
    • Apply profile
  • List nodes
  • Stop node
  • Resume node
  • Clean nodes
  • Transit Seal Config
  • Source environment
  • Access node directory
  • Get/Set unseal keys
  • Get/Set root token (prod)
  • Set desired connection address.
  • Initialize
  • Seal
  • Unseal
  • Enable auditing
  • Tail logs
• Profiles
  • List profiles
  • Transit Unseal profile
  • PKI profile
  • Userpass profile
  • Remove profiles
  • Make profiles configurable
  • Add script-driven profiles
• Clusters
  • Build Cluster
  • List clusters
  • Join node to HA cluster
  • Remove node from HA cluster
  • Clean cluster
  • Cluster profiles
    • Three-node HA cluster
    • Transit Auto-Unseal key cluster + target cluster
• benchmark-vault integration
• Auto-fetch release binaries
• Ecosystem integrations
  • Databases
  • RabbitMQ
  • Apache/nginx for certificates
  • OpenLDAP/389-ds
  • FreeRADIUS
  • Run node/cluster on container?
• [-] TUI?