Skip to content

This script is built for analyzing vault backups stored at consul cluster

License

Notifications You must be signed in to change notification settings

yura-shutkin/vault-backup-analyzer

Repository files navigation

Vault backup analyzer

This script is built for analyzing vault backups stored at consul cluster

metrics

Metrics template

metric_name labels
vba_auth_backend_objects_count type, mount_point
vba_auth_backend_objects_size type, mount_point
vba_auth_backend_roles_count type, mount_point
vba_auth_backend_roles_size type, mount_point
vba_auth_backend_role_ids_count type, mount_point
vba_auth_backend_role_ids_size type, mount_point
vba_auth_backend_secret_ids_count type, mount_point
vba_auth_backend_secret_ids_size type, mount_point
vba_auth_backend_secret_ids_accessors_count type, mount_point
vba_auth_backend_secret_ids_accessors_size type, mount_point
vba_auth_backend_tokens_count type, mount_point
vba_auth_backend_tokens_size type, mount_point
vba_auth_backend_token_renew_self_count type, mount_point
vba_auth_backend_token_renew_self_size type, mount_point
vba_auth_backend_token_accessors_count type, mount_point
vba_auth_backend_token_accessors_size type, mount_point
vba_auth_backend_users_count type, mount_point
vba_auth_backend_users_size type, mount_point
vba_auth_backend_groups_count type, mount_point
vba_auth_backend_groups_size type, mount_point
vba_secrets_engine_objects_count type, mount_point, version
vba_secrets_engine_objects_size type, mount_point, version
vba_secrets_engine_secrets_count type, mount_point, version
vba_secrets_engine_secrets_size type, mount_point, version
vba_secrets_engine_secrets_archives_count type, mount_point, version
vba_secrets_engine_secrets_archives_size type, mount_point, version
vba_secrets_engine_secrets_policies_count type, mount_point, version
vba_secrets_engine_secrets_policies_size type, mount_point, version
vba_secrets_engine_secrets_versions_count type, mount_point, version
vba_secrets_engine_secrets_versions_size type, mount_point, version
vba_system_objects_count type
vba_system_objects_size type

Metrics example

metric_name valid type labels valid mount_point labels valid version labels
vba_auth_backend_objects_count approle, userpass, kubernetes, LDAP, token * N/A
vba_auth_backend_roles_count approle, kubernetes * N/A
vba_auth_backend_role_ids_count approle * N/A
vba_auth_backend_secret_ids_count approle * N/A
vba_auth_backend_secret_ids_accessors_count approle * N/A
vba_auth_backend_tokens_count userpass, approle, kubernetes, LDAP, token * N/A
vba_auth_backend_token_renew_self_count userpass, approle, kubernetes, LDAP * N/A
vba_auth_backend_token_accessors_count userpass, approle, kubernetes, LDAP, token * N/A
vba_auth_backend_users_count userpass, LDAP * N/A
vba_auth_backend_groups_count LDAP * N/A
vba_secrets_engine_objects_count cubbyhole, transit, identity, kv * N/A
vba_secrets_engine_secrets_count cubbyhole, transit, identity * ''
vba_secrets_engine_secrets_count kv * '1'
vba_secrets_engine_secrets_count kv * '2'
vba_secrets_engine_secrets_archives_count kv, transit * '', '2'
vba_secrets_engine_secrets_policies_count kv, transit * '', '2'
vba_secrets_engine_secrets_versions_count kv * '2'
vba_system_objects_count policy, core, audit_device, counters N/A N/A

License

This project is licensed under the MIT License - see the LICENSE.md file for details

About

This script is built for analyzing vault backups stored at consul cluster

Resources

License

Stars

Watchers

Forks

Packages

No packages published