Feature Request: Import and Export of Policies.

[ksquaredkey]

Thank you for this tool - it was very handy migrating secrets to new Vault server (fortunately, we don't care about the version history yet).

The next step of my migration was to move my Policies over in a manner very much like import/export. I was able to do that with some simple shell scripting, but would be cool to have as part of Medusa.

Putting shell script fragments here in case someone else trying to migrate might find them useful.

dump-policies.sh:

dump_dir="./dumped-policies"

policies=$(vault policy list | grep -v root)

mkdir -p "${dump_dir}"
for p in ${policies} ; do
    echo "reading policy: ${p}"
    vault policy read "${p}" > "${dump_dir}/${p}-policy-dumped.hcl"
done

load-dumped-policies.sh:

dump_dir="./dumped-policies"

policies=$(cd ${dump_dir}/ ; ls *-policy-dumped.hcl | sed -e 's/-policy-dumped.hcl//g')

for p in ${policies} ; do
    echo "writing policy: ${p}"
    vault policy write "${p}" "${dump_dir}/${p}-policy-dumped.hcl"
done