hashicorp-vault - 在 HashiCorp Vault 文档中，多次提到 "Lease IDs"。我如何找到一个？

Question

在 Vault Web UI 中的“访问”下，它显示了通过“租约 ID”查找租约的能力:If you know the id of a lease, enter it above to lookup details of the lease.
我如何首先获得“租约的 ID”？

在 Vault CLI 中，看起来我唯一的租用选项是 renew和 revoke :

~ |  👾 vault lease lookup
Usage: vault lease <subcommand> [options] [args]

  This command groups subcommands for interacting with leases. Users can revoke
  or renew leases.

  Renew a lease:

      $ vault lease renew database/creds/readonly/2f6a614c...

  Revoke a lease:

      $ vault lease revoke database/creds/readonly/2f6a614c...

Subcommands:
    renew     Renews the lease of a secret
    revoke    Revokes leases and secrets

如果我只需要获取租用 ID，我将如何从 CLI 执行此操作？

Answer 1

好吧，就像 CLI 中的许多“缺少命令”一样，稍微阅读 API 文档就解决了这个问题。

不，没有 vault lease lookup或 vault lease list命令。

但事实证明，有据可查的 LIST HTTP 请求到 sys/leases/lookup排序对应于 vault list同样的 sys/leases/lookup小路:

~ |  👾 vault list sys/leases
No value found at sys/leases/
~ |  👾 vault list sys/leases/lookup
Keys
----
auth/
~ |  👾 vault list sys/leases/lookup/auth
Keys
----
approle/
token/
userpass/
~ |  👾

通过查看以下文档，今天可以愉快地探索您的租约:

什么是租约？
https://www.vaultproject.io/guides/identity/lease
https://www.vaultproject.io/docs/concepts/lease.html

用于租赁的 Vault API: https://www.vaultproject.io/api/system/leases.html
用于租赁的 Vault CLI: https://www.vaultproject.io/docs/commands/lease/index.html