ITOM patter discovery

muazzam
Tera Contributor

I am trying to run a shell script in ITOM Custom pattern. Basically i am trying to connect to vault server using vault approle method to connect and retrieve the vault token and then will use the same token to retrieve the secret from the vault server from the secret path.

I have also check this out about servicenow vault integration using vault servicenow crednetial resolver https://developer.hashicorp.com/vault/docs/platform/servicenow but i am trying to retrieve the vault token and vault secret using the shell script from ITOM patter .

Is this doable through ITOM patter, can we execute shell script from ITOM pattern like we have eval() for javascript 

2 REPLIES 2

Doci1
Kilo Sage

@muazzam honestly we are login to vault server with token, so I cannot imagine why you would like to get that token by any "call". But maybe you are using username and password. Anyway, to use token and secret in one script seems to me as a security hole. 
But if you will implement the integration you mentioned in the URL, all is done automatically: getting cred for discovery from MID server.

muazzam
Tera Contributor

@Doci1 The secrets are stored in hashicorp vault server and to retrieve the secret i need to first connect to vault server using the vault approle method to get vault token and then will use the same token to retrieve the secrets from the path in vault server.
We are doing all these to discover BMC devices chassis serial number, and adding all above mentioned steps for vault in our custom BMC ITOM pattern.