Add Kubernetes Auth Method

CHANGES.md

@@ -1,5 +1,9 @@
 # Change Log
 
+## 1.1.0
+
+- Added `kuberentes` auth method.
+
 ## 1.0.0
 
 * Drop Python 2.7 support

README.md

@@ -13,14 +13,15 @@ It should contain:
 * `cert` - Path to client-side certificate
 * `verify` - Whether to verify the SSL certificate or not
 * `auth_method` - Which authentication method to use.
- Only `token` (the default) and `approle` are implemented so far.
+ Only `token` (the default), `approle` and `kubernetes` are implemented so far.
 
 Also include the relevant auth_method-specific config:
 
 * `token` - Authentication token for `auth_method=token`. If not specified,
  also tries using the `VAULT_TOKEN` env var or the `~/.vault-token` file.
 * `role_id` - Authentication role_id for `auth_method=approle`.
 * `secret_id` - Authentication secret_id for `auth_method=approle`.
+* `role` - Authentication role for `auth_method=kubernetes`
 
 You can also use dynamic values from the datastore. See the
 [docs](https://docs.stackstorm.com/reference/pack_configs.html) for more info.

actions/lib/action.py

@@ -33,6 +33,12 @@ def _get_client(self):
  role_id=self.config["role_id"],
  secret_id=self.config["secret_id"],
  )
+ elif auth_method == "kubernetes":
+ with open("/var/run/secrets/kubernetes.io/serviceaccount/token") as sa_token:
+ client.auth.kubernetes.login(
+ self.config["role"],
+ sa_token.read(),
+ )
  else:
  raise NotImplementedError(
  "The {} auth method has a typo or has not been implemented (yet).".format(

pack.yaml

@@ -2,7 +2,7 @@
 ref: vault
 name: vault
 description: HashiCorp Vault
-version: 1.0.0
+version: 1.1.0
 python_versions:
  - "3"
 author: steve.neuharth