Jenkins steps for vault

ReadVaultSecret.groovy

#!/usr/bin/env groovy
def call(body){
    def config = [:]
    body.resolveStrategy = Closure.DELEGATE_FIRST
    body.delegate = config
    body()

    def splited = config.secretPath.split('@')

    def chartPath = config.chartPath
    def secretPath = splited[0]
    def key = splited.size() == 2 ? splited[1] : 'value'
    def saveFile = config.saveFile ?: key == 'value' ? secretPath : "${secretPath}/${key}"

    WithVaultCredentials {
        sh """
            vault kv get --field=${key} "${config.vaultNamespace}${secretPath}" > "${chartPath}/${saveFile}"
        """
    }
}

usage.Jenkinsfile

            ReadVaultSecret {
                vaultNamespace = "secret/devops/${currentEnv}/"
                chartPath = currentPath
                secretPath = "kubeconfig"
            }
            
                 WriteVaultSecret {
                    secretPath = "secret/projects/helm/${project}/${currentEnv}/${currentApp}-${currentEnv}/${it.key}"
                    value = it.value
                }

withVaultCredentials.groovy

#!/usr/bin/env groovy
def call(body){
    withCredentials([
      string(credentialsId: 'VAULT_ADDR', variable: 'VAULT_ADDR'), 
      string(credentialsId: 'VAULT_TOKEN', variable: 'VAULT_TOKEN')]) {
        body()
    }
}

WriteVaultSecret.groovy

#!/usr/bin/env groovy
def call(body){
    def config = [:]
    body.resolveStrategy = Closure.DELEGATE_FIRST
    body.delegate = config
    body()
    def key = config.key ?: 'value'
    WithVaultCredentials {
        sh """
            vault kv put ${config.secretPath} ${key}=${config.value}
        """
    }
}