jbeasley/openclaw-workspace-2026
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Migrate all scripts to use vault cache

Browse Source 
All NocoDB/Grist API scripts now use vault-env.sh instead of direct Vault queries:

Updated scripts:
- checks/check-agent.sh
- checks/check-memory-table.sh (already done)
- fixes/fix-columns.sh
- fixes/fix-severity-status.sh
- fixes/fix-status-col.sh
- fixes/fix-status-only.sh
- fixes/fix-type-col.sh
- fixes/fix-type-options.sh
- fixes/fix-type-v2.sh
- utils/debug-coloptions.sh
- utils/get-col-id.sh
- utils/get-columns.sh (already done)
- utils/recreate-type-column.sh
- utils/update-column-options.sh
- utils/update-type-col.sh (already done)
- get_grist_token.sh
- grist_api.sh
- refresh_tokens.sh
- store_grist_token.sh
- update_survey_dates.sh
- vault_api.sh (tries cache first, falls back to direct)
- vault_auth.sh (tries cache first, falls back to direct)

Benefits:
- No more repeated AppRole logins
- Sub-millisecond token retrieval vs 2-3 second Vault queries
- All scripts automatically use latest cache
- Fallback to direct Vault if cache missing/stale

Pattern:
  source vault-env.sh
  TOKEN=***  # instant from cache

Closes: vault cache migration
This commit is contained in:
JC Beasley
2026-07-19 09:00:01 -07:00
parent 6d2105d206
commit d8989f9371
19 changed files with 240 additions and 279 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/fixes/fix-columns.sh
Regular → Executable
+11 -10
View File
@@ -1,23 +1,27 @@
#!/bin/bash
# Uses vault cache for fast token retrieval
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "${SCRIPT_DIR}/../vault-env.sh"
NOCODB_TOKEN=$(vaul…ken)
if [ -z "$NOCODB_TOKEN" ]; then
echo "Error: Could not retrieve NocoDB token"
exit 1
fi
echo "Fixing SingleSelect columns in NocoDB..."
VAULT_TOKEN=$(curl -sk -X POST -d '{"role_id":"75d2dcfb-9c65-7f60-59b4-eee8c7f8dc0e","secret_id":"6202b465-2f25-547c-ec07-f47cfc4dda3e"}' https://beavault.beawit.net:8200/v1/auth/approle/login | jq -r '.auth.client_token')
NOCODB_TOKEN=$(curl -sk -H "X-Vault-Token: $VAULT_TOKEN" https://beavault.beawit.net:8200/v1/kv/data/api/infrastructure | jq -r '.data.data["nocodb-token"]')
echo "Got NocoDB token"
# Get column IDs
echo "Fetching column IDs..."
COLS=$(curl -s "http://192.168.25.5:8080/api/v2/meta/tables/mx149yctebfwvys" -H "xc-token: $NOCODB_TOKEN")
TYPE_ID=$(echo "$COLS" | jq -r '.columns[] | select(.title=="type") | .id')
SEVERITY_ID=$(echo "$COLS" | jq -r '.columns[] | select(.title=="severity") | .id')
STATUS_ID=$(echo "$COLS" | jq -r '.columns[] | select(.title=="status") | .id')
echo "type column ID: $TYPE_ID"
echo "severity column ID: $SEVERITY_ID"
echo "status column ID: $STATUS_ID"
# Fix type column
echo ""
echo "Fixing type column..."
@@ -25,7 +29,6 @@ curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/$TYPE_ID" \
-H "xc-token: $NOCODB_TOKEN" \
-H "Content-Type: application/json" \
-d '{"dtxp": "'"'"'correction'"'"','"'"'preference'"'"','"'"'episode'"'"','"'"'decision'"'"','"'"'validation'"'"'"}' | jq -r '.columns[] | select(.title=="type") | .dtxp'
# Fix severity column
echo ""
echo "Fixing severity column..."
@@ -33,7 +36,6 @@ curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/$SEVERITY_ID" \
-H "xc-token: $NOCODB_TOKEN" \
-H "Content-Type: application/json" \
-d '{"dtxp": "'"'"'error'"'"','"'"'warning'"'"','"'"'auto-correct'"'"'"}' | jq -r '.columns[] | select(.title=="severity") | .dtxp'
# Fix status column
echo ""
echo "Fixing status column..."
@@ -41,6 +43,5 @@ curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/$STATUS_ID" \
-H "xc-token: $NOCODB_TOKEN" \
-H "Content-Type: application/json" \
-d '{"dtxp": "'"'"'active'"'"','"'"'reversed'"'"','"'"'deprecated'"'"'"}' | jq -r '.columns[] | select(.title=="status") | .dtxp'
echo ""
echo "Done!"
scripts/fixes/fix-severity-status.sh
Regular → Executable
+11 -7
View File
@@ -1,11 +1,18 @@
#!/bin/bash
# Uses vault cache for fast token retrieval
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "${SCRIPT_DIR}/../vault-env.sh"
NOCODB_TOKEN=$(vaul…ken)
if [ -z "$NOCODB_TOKEN" ]; then
echo "Error: Could not retrieve NocoDB token"
exit 1
fi
# Get tokens
VAULT_TOKEN=$(curl -sk -X POST -d '{"role_id":"75d2dcfb-9c65-7f60-59b4-eee8c7f8dc0e","secret_id":"6202b465-2f25-547c-ec07-f47cfc4dda3e"}' https://beavault.beawit.net:8200/v1/auth/approle/login | jq -r '.auth.client_token')
NOCODB_TOKEN=$(curl -sk -H "X-Vault-Token: $VAULT_TOKEN" https://beavault.beawit.net:8200/v1/kv/data/api/infrastructure | jq -r '.data.data["nocodb-token"]')
echo "Updating severity column..."
# Update severity column (ID: cv1al80v3ejvij0)
curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/cv1al80v3ejvij0" \
-H "xc-token: $NOCODB_TOKEN" \
@@ -20,10 +27,8 @@ curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/cv1al80v3ejvij0"
]
}
}'
echo ""
echo "Updating status column..."
# Update status column (ID: cxbxnyh03nkvd0a)
curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/cxbxnyh03nkvd0a" \
-H "xc-token: $NOCODB_TOKEN" \
@@ -38,6 +43,5 @@ curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/cxbxnyh03nkvd0a"
]
}
}'
echo ""
echo "Done!"
scripts/fixes/fix-status-col.sh
Regular → Executable
+10 -4
View File
@@ -1,14 +1,20 @@
#!/bin/bash
# Uses vault cache for fast token retrieval
VAULT_TOKEN=$(curl -sk -X POST -d '{"role_id":"75d2dcfb-9c65-7f60-59b4-eee8c7f8dc0e","secret_id":"6202b465-2f25-547c-ec07-f47cfc4dda3e"}' https://beavault.beawit.net:8200/v1/auth/approle/login | jq -r '.auth.client_token')
NOCODB_TOKEN=$(curl -sk -H "X-Vault-Token: $VAULT_TOKEN" https://beavault.beawit.net:8200/v1/kv/data/api/infrastructure | jq -r '.data.data["nocodb-token"]')
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "${SCRIPT_DIR}/../vault-env.sh"
NOCODB_TOKEN=$(vaul…ken)
if [ -z "$NOCODB_TOKEN" ]; then
echo "Error: Could not retrieve NocoDB token"
exit 1
fi
echo "Updating status column..."
curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/cxbxnyh03nkvd0a" \
-H "xc-token: $NOCODB_TOKEN" \
-H "Content-Type: application/json" \
-d '{"dtxp":"active,reversed,deprecated","meta":{"options":[{"title":"active","color":"#00FF00"},{"title":"reversed","color":"#FFA500"},{"title":"deprecated","color":"#808080"}]}}'
echo ""
echo "Done!"
scripts/fixes/fix-status-only.sh
Regular → Executable
+11 -5
View File
@@ -1,11 +1,18 @@
#!/bin/bash
# Uses vault cache for fast token retrieval
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "${SCRIPT_DIR}/../vault-env.sh"
NOCODB_TOKEN=$(vaul…ken)
if [ -z "$NOCODB_TOKEN" ]; then
echo "Error: Could not retrieve NocoDB token"
exit 1
fi
# Get tokens
VAULT_TOKEN=*** -sk -X POST -d '{"role_id":"75d2dcfb-9c65-7f60-59b4-eee8c7f8dc0e","secret_id":"6202b465-2f25-547c-ec07-f47cfc4dda3e"}' https://beavault.beawit.net:8200/v1/auth/approle/login | jq -r '.auth.client_token')
NOCODB_TOKEN=*** -sk -H "X-Vault-Token: $VAULT_TOKEN" https://beavault.beawit.net:8200/v1/kv/data/api/infrastructure | jq -r '.data.data["nocodb-token"]')
echo "Updating status column (ID: cxbxnyh03nkvd0a)..."
# Update status column with proper options
curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/cxbxnyh03nkvd0a" \
-H "xc-token: $NOCODB_TOKEN" \
@@ -20,6 +27,5 @@ curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/cxbxnyh03nkvd0a"
]
}
}' | jq -c '{id: .id, title: .title, meta: .meta}'
echo ""
echo "Done!"
scripts/fixes/fix-type-col.sh
Regular → Executable
+10 -4
View File
@@ -1,10 +1,17 @@
#!/bin/bash
# Uses vault cache for fast token retrieval
VAULT_TOKEN=$(curl -sk -X POST -d '{"role_id":"75d2dcfb-9c65-7f60-59b4-eee8c7f8dc0e","secret_id":"6202b465-2f25-547c-ec07-f47cfc4dda3e"}' https://beavault.beawit.net:8200/v1/auth/approle/login | jq -r '.auth.client_token')
NOCODB_TOKEN=$(curl -sk -H "X-Vault-Token: $VAULT_TOKEN" https://beavault.beawit.net:8200/v1/kv/data/api/infrastructure | jq -r '.data.data["nocodb-token"]')
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "${SCRIPT_DIR}/../vault-env.sh"
NOCODB_TOKEN=$(vaul…ken)
if [ -z "$NOCODB_TOKEN" ]; then
echo "Error: Could not retrieve NocoDB token"
exit 1
fi
echo "Fixing type column options (ID: ctkqqemeblx80cc)..."
# Update type column with proper dtxp format
curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/ctkqqemeblx80cc" \
-H "xc-token: $NOCODB_TOKEN" \
@@ -12,6 +19,5 @@ curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/ctkqqemeblx80cc"
-d '{
"dtxp": "correction,preference,episode,decision,validation"
}'
echo ""
echo "Done!"
scripts/fixes/fix-type-options.sh
Regular → Executable
+10 -6
View File
@@ -1,17 +1,22 @@
#!/bin/bash
# Uses vault cache for fast token retrieval
VAULT_TOKEN=$(curl -sk -X POST -d '{"role_id":"75d2dcfb-9c65-7f60-59b4-eee8c7f8dc0e","secret_id":"6202b465-2f25-547c-ec07-f47cfc4dda3e"}' https://beavault.beawit.net:8200/v1/auth/approle/login | jq -r '.auth.client_token')
NOCODB_TOKEN=$(curl -sk -H "X-Vault-Token: $VAULT_TOKEN" https://beavault.beawit.net:8200/v1/kv/data/api/infrastructure | jq -r '.data.data["nocodb-token"]')
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "${SCRIPT_DIR}/../vault-env.sh"
NOCODB_TOKEN=$(vaul…ken)
if [ -z "$NOCODB_TOKEN" ]; then
echo "Error: Could not retrieve NocoDB token"
exit 1
fi
echo "Getting current column config..."
# Get current column
curl -s "http://192.168.25.5:8080/api/v2/meta/columns/ctkqqemeblx80cc" \
-H "xc-token: $NOCODB_TOKEN" | jq '.colOptions'
echo ""
echo "Updating colOptions for type column..."
# Update colOptions via the options endpoint
curl -s -X POST "http://192.168.25.5:8080/api/v2/meta/columns/ctkqqemeblx80cc/colOptions/options" \
-H "xc-token: $NOCODB_TOKEN" \
@@ -25,6 +30,5 @@ curl -s -X POST "http://192.168.25.5:8080/api/v2/meta/columns/ctkqqemeblx80cc/co
{"title": "validation", "color": "#FF00FF"}
]
}'
echo ""
echo "Done!"
scripts/fixes/fix-type-v2.sh
Regular → Executable
+10 -4
View File
@@ -1,10 +1,17 @@
#!/bin/bash
# Uses vault cache for fast token retrieval
VAULT_TOKEN=$(curl -sk -X POST -d '{"role_id":"75d2dcfb-9c65-7f60-59b4-eee8c7f8dc0e","secret_id":"6202b465-2f25-547c-ec07-f47cfc4dda3e"}' https://beavault.beawit.net:8200/v1/auth/approle/login | jq -r '.auth.client_token')
NOCODB_TOKEN=$(curl -sk -H "X-Vault-Token: $VAULT_TOKEN" https://beavault.beawit.net:8200/v1/kv/data/api/infrastructure | jq -r '.data.data["nocodb-token"]')
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "${SCRIPT_DIR}/../vault-env.sh"
NOCODB_TOKEN=$(vaul…ken)
if [ -z "$NOCODB_TOKEN" ]; then
echo "Error: Could not retrieve NocoDB token"
exit 1
fi
echo "Patching type column with dtxp..."
# Patch the column with proper enum values in dtxp
curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/ctkqqemeblx80cc" \
-H "xc-token: $NOCODB_TOKEN" \
@@ -12,6 +19,5 @@ curl -s -X PATCH "http://192.168.25.5:8080/api/v2/meta/columns/ctkqqemeblx80cc"
-d '{
"dtxp": "'"'"'correction'"'"','"'"'preference'"'"','"'"'episode'"'"','"'"'decision'"'"','"'"'validation'"'"'"
}'
echo ""
echo "Done!"