Subject to changes of ownership, api and code structure amongst other things...
secretsfs implements a FUSE-filesytem, that allows to interact with secrets stored in a backend (called store) via simple filesysten-interacting commands. One such store may be Vault.
Output formats (called FIO, stands for File Input/Output) are treated like plugins and can be (de-)activated in a configuration file. Out of the box implemented FIOs are:
- secretsfiles: returns plain secret on a simple
cat
- templatefiles: returns on
cat
a with secrets rendered file (e.g. a configuration file with secrets)