The cookbook secrets_management does not include any executable recipes as it is designed to be an utility cookbook and support other initiatives. For the purposes of testing and validating this code, we have included a test cookbook with pre-configured recipes.
| Name | Description |
|---|---|
| Default | Roll-up recipe to test all of the functionality of the following recipes - hashivault, chef_vault, data_bag |
| hashivault | Test gathering secrets from Hashicorp Vault environments. |
| hashivault_with_chef_vault | Test gathering secrets from Hashicorp Vault environments by first pulling the information from a ChefVault item. |
| chef_vault | Test gathering secrets from ChefVault bags |
| data_bag | Test gathering secrets from Chef DataBags |
In order to validate the integration with Hashicorp Vault, an existing Hashicorp Vault server must be available and this Test-Kitchen server will need to have access to the same network.
The test cookbook requires test-kitchen to be installed and that you configure the following environment variables in order to validate recipes.
- ENV['VAULT_TOKEN']
- ENV['VAULT_ADDR']
Please refer to https://github.com/chef-cookbooks/community_cookbook_documentation/blob/master/TESTING.MD