apiVersion: v1
kind: ConfigMap
metadata:
  name: vault-snapshot-script
  namespace: vault
  labels:
    app.kubernetes.io/name: vault-snapshot-script
    app.kubernetes.io/instance: vault
    app.kubernetes.io/part-of: vault
data:
  snapshot.sh: |
    DATE=$(date +"%Y%m%d-%H-%M")

    echo " "
    echo ">> Running Vault Snapshot Script ..."

    echo " "
    echo ">> Fetching Vault token ..."
    export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id=$VAULT_APPROLE_ROLE_ID secret_id=$VAULT_APPROLE_SECRET_ID)

    if [ -z "$VAULT_TOKEN" ]; then
        echo ">> ERROR: Failed to fetch Vault token! Exiting..."
        exit 1
    fi

    echo " "
    echo ">> Taking Vault snapshot ..."
    vault operator raft snapshot save /opt/backup/vault-snapshot-$DATE.snap

    echo " "
    echo ">> Setting ownership of Vault snapshot ..."
    chown 100:1000 /opt/backup/vault-snapshot-$DATE.snap

    echo " "
    echo ">> Completed Vault snapshot"