Terraform provider for credstash secrets

Read secrets stored with credstash.

Install

1. Download the binary

2. Create a terraformrc file

    # ~/.terraformrc
    providers {
        credstash = "/path/to/bin/terraform-provider-credstash"
    }
   

3. Profit

From source

$ go get -v -u github.com/sspinc/terraform-provider-credstash

Usage

provider "credstash" {
    table  = "credential-store"
    region = "us-east-1"
}

data "credstash_secret" "rds_password" {
    name = "rds_password"
}

data "credstash_secret" "my_secret" {
    name    = "some_secret"
    version = "0000000000000000001"
}

resource "aws_db_instance" "postgres" {
    password = "${data.credstash_secret.rds_password.value}"

    # other important attributes
}

AWS credentials

AWS credentials are not directly set. Use one of the methods discussed here.

You can set a specific profile to use:

provider "credstash" {
    region  = "us-east-1"
    profile = "my-profile"
}

Dependencies

For vendoring govendor is used.