Vault AMI JSON

vault-ami.json

{
  "variables": {
    "aws_region": "",
    "source_ami": "",
    "aws_ami_name": "amazonlinux-{{timestamp}}-vault",
    "vault_version": "1.1.1"
  },

  "builders": [
    {
      "type": "amazon-ebs",
      "region": "{{user `aws_region`}}",
      "instance_type": "m3.medium",
      "ssh_username": "ec2-user",
      "ami_name": "{{user `aws_ami_name`}}",
      "ami_description": "Vault ami",
      "source_ami": "{{user `source_ami`}}"
    }
  ],
  "provisioners": [
    {
      "type": "shell",
      "remote_folder": "/home/ec2-user",
      "inline": [
        "sudo yum install -y unzip",
        "sudo mkdir /etc/vault.d/",
        "cd /usr/local/bin/",
        "sudo chown ec2-user:ec2-user /etc/vault.d/",
        "sudo chown ec2-user:ec2-user /etc/init.d/",
        "sudo chown ec2-user:ec2-user /usr/local/bin/",
        "sudo wget https://releases.hashicorp.com/vault/{{user `vault_version`}}/vault_{{user `vault_version`}}_linux_amd64.zip",
        "sudo unzip vault_{{user `vault_version`}}_linux_amd64.zip",
        "sudo rm vault_{{user `vault_version`}}_linux_amd64.zip",
        "sudo useradd vault"
      ]
    },
    {
      "type": "file",
      "source": "res/vault.hcl",
      "destination": "/etc/vault.d/vault.hcl"
    },
    {
      "type": "file",
      "source": "res/vault.sysvinit",
      "destination": "/etc/init.d/vault.sysvinit"
    },
    {
      "type": "file",
      "source": "res/create-vault-config.sh",
      "destination": "/usr/local/bin/create-vault-config.sh"
    },
    {
      "type": "shell",
      "remote_folder": "/home/ec2-user",
      "inline": [
        "sudo chmod 755 /etc/init.d/vault.sysvinit",
        "sudo chown root /etc/init.d/vault.sysvinit",
        "sudo chmod a+x /usr/local/bin/create-vault-config.sh",
        "sudo setcap cap_ipc_lock=+ep $(readlink -f $(which vault))"
      ]
    }
  ]
}