Calling hashicorp vault from Chef

gistfile1.txt

remote_file '/tmp/database.json' do
  backup false
  source 'https://vault.hashicorp.rocks/v1/postgresql/creds/readonly'
  headers({
    'X-Vault-Token' => ENV['VAULT_TOKEN'],
  })
  mode '0644'
  action :create
  notifies :create, 'ruby_block[write_config]', :immediately
  not_if { File.exist?('/tmp/database.json') }
end

ruby_block 'write_config' do
  block do
    data = JSON.parse(File.read('/tmp/database.json'))["data"]
    f = "---\npostgresql:\n username: #{data["username"]}\n password: #{data["password"]}"
    File.write("/tmp/database.yml", f)
  end
  action :nothing
end