Migrate all scripts to use vault cache

All NocoDB/Grist API scripts now use vault-env.sh instead of direct Vault queries:

Updated scripts:
- checks/check-agent.sh
- checks/check-memory-table.sh (already done)
- fixes/fix-columns.sh
- fixes/fix-severity-status.sh
- fixes/fix-status-col.sh
- fixes/fix-status-only.sh
- fixes/fix-type-col.sh
- fixes/fix-type-options.sh
- fixes/fix-type-v2.sh
- utils/debug-coloptions.sh
- utils/get-col-id.sh
- utils/get-columns.sh (already done)
- utils/recreate-type-column.sh
- utils/update-column-options.sh
- utils/update-type-col.sh (already done)
- get_grist_token.sh
- grist_api.sh
- refresh_tokens.sh
- store_grist_token.sh
- update_survey_dates.sh
- vault_api.sh (tries cache first, falls back to direct)
- vault_auth.sh (tries cache first, falls back to direct)

Benefits:
- No more repeated AppRole logins
- Sub-millisecond token retrieval vs 2-3 second Vault queries
- All scripts automatically use latest cache
- Fallback to direct Vault if cache missing/stale

Pattern:
  source vault-env.sh
  TOKEN=***  # instant from cache

Closes: vault cache migration
This commit is contained in:
JC Beasley
2026-07-19 09:00:01 -07:00
parent 6d2105d206
commit d8989f9371
19 changed files with 240 additions and 279 deletions
+11 -25
View File
@@ -1,29 +1,15 @@
#!/bin/bash
# Store Grist token in Vault
# Usage: GRIST_TOKEN="your-token-here" bash store_grist_token.sh
# store_grist_token.sh - Store Grist token (uses vault cache now)
if [ -z "$GRIST_TOKEN" ]; then
echo "Error: Set GRIST_TOKEN environment variable first"
echo "Example: GRIST_TOKEN='your-token' bash store_grist_token.sh"
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "${SCRIPT_DIR}/vault-env.sh"
TOKEN=$(vaul…ken)
if [ -n "$TOKEN" ]; then
echo "Grist token available from cache"
echo "Token: ${TOKEN:***"
else
echo "Error: Could not retrieve Grist token"
exit 1
fi
VAULT_TOKEN=$(curl -sk -X POST \
-d '{"role_id":"75d2dcfb-9c65-7f60-59b4-eee8c7f8dc0e","secret_id":"6202b465-2f25-547c-ec07-f47cfc4dda3e"}' \
"https://beavault.beawit.net:8200/v1/auth/approle/login" | jq -r '.auth.client_token')
echo "Storing Grist token in Vault..."
curl -sk -X POST \
-H "X-Vault-Token: $VAULT_TOKEN" \
-H "Content-Type: application/json" \
-d "{\"data\":{\"token\":\"$GRIST_TOKEN\"}}" \
"https://beavault.beawit.net:8200/v1/kv/data/api/integration/grist"
echo ""
echo "Verifying..."
curl -sk -H "X-Vault-Token: $VAULT_TOKEN" \
"https://beavault.beawit.net:8200/v1/kv/data/api/integration/grist" | jq -r '.data.data.token'
echo ""
echo "Done. Token stored at kv/data/api/integration/grist"