Add vault database secret engine modules

changelog/51986.fixed

@@ -0,0 +1 @@
+Fixed Salt master does not renew token

changelog/57561.fixed

@@ -0,0 +1 @@
+Fixed vault module fetching more than one secret in one run with single-use tokens

changelog/58174.fixed

@@ -0,0 +1 @@
+Fixed Vault verify option to work on minions when only specified in master config

changelog/58580.fixed

@@ -0,0 +1 @@
+Fixed vault command errors configured locally

changelog/60779.fixed

@@ -0,0 +1 @@
+Fixed sdb.get_or_set_hash with Vault single-use tokens

changelog/62380.fixed

@@ -0,0 +1 @@
+Fixed Vault session storage to allow unlimited use tokens

changelog/62823.added

@@ -0,0 +1 @@
+Added Vault AppRole and identity issuance to minions

changelog/62825.added

@@ -0,0 +1 @@
+Added Vault AppRole auth mount path configuration option

changelog/62828.added

@@ -0,0 +1 @@
+Added distribution of Vault authentication details via response wrapping

changelog/63406.added

@@ -0,0 +1 @@
+Added Vault token lifecycle management

changelog/63440.added

@@ -0,0 +1 @@
+Added Vault lease management utility

doc/_ext/vaultpolicylexer.py

@@ -0,0 +1,25 @@
+from pygments.lexer import bygroups, inherit
+from pygments.lexers.configs import TerraformLexer
+from pygments.token import Keyword, Name, Punctuation, Whitespace
+
+
+class VaultPolicyLexer(TerraformLexer):
+    aliases = ["vaultpolicy"]
+    filenames = ["*.hcl"]
+    mimetypes = ["application/x-hcl-policy"]
+
+    tokens = {
+        "basic": [
+            inherit,
+            (
+                r"(path)(\s+)(\".*\")(\s+)(\{)",
+                bygroups(
+                    Keyword.Reserved, Whitespace, Name.Variable, Whitespace, Punctuation
+                ),
+            ),
+        ],
+    }
+
+
+def setup(app):
+    app.add_lexer("vaultpolicy", VaultPolicyLexer)

doc/conf.py

@@ -151,7 +151,8 @@
     "sphinx.ext.intersphinx",
     "httpdomain",
     "youtube",
-    "saltrepo"
+    "saltrepo",
+    "vaultpolicylexer",
     #'saltautodoc', # Must be AFTER autodoc
     #'shorturls',
 ]

doc/ref/modules/all/index.rst

@@ -493,6 +493,7 @@ execution modules
     vagrant
     varnish
     vault
+    vault_db
     vbox_guest
     vboxmanage
     vcenter

doc/ref/modules/all/salt.modules.vault_db.rst

@@ -0,0 +1,5 @@
+salt.modules.vault_db
+=====================
+
+.. automodule:: salt.modules.vault_db
+    :members:

doc/ref/states/all/index.rst

@@ -319,6 +319,7 @@ state modules
     user
     vagrant
     vault
+    vault_db
     vbox_guest
     victorops
     virt

doc/ref/states/all/salt.states.vault_db.rst

@@ -0,0 +1,5 @@
+salt.states.vault_db
+====================
+
+.. automodule:: salt.states.vault_db
+    :members: