Renews a Vault token via Spring Cloud Services Config Server client app

config-server-client-token-renew.sh

#!/bin/bash
APP=$1
if [ "$APP" = "" ]
then
        echo "ERROR: Must provide application name that is accessible via `cf app [appname]` and bound to Config Server instance as first argument to script."
        exit 1
fi
INTERVAL=$2
if [ "$INTERVAL" = "" ]
then
        echo "ERROR: Must provide token time interval as second argument to script."
        exit 1
fi
if [ "$VAULT_TOKEN" = "" ]
then
        echo "ERROR: Must provide a valid Vault token via the VAULT_TOKEN environment variable."
        exit 1
fi
ACCESS_TOKEN_URI=`cf env $APP | grep access_token_uri | awk '{print $2}' | sed 's/\"//g' | sed 's/,//'`
CLIENT_ID=`cf env $APP | grep client_id | awk '{print $2}' | sed 's/\"//g' | sed 's/,//'`
CLIENT_SECRET=`cf env $APP | grep client_secret | awk '{print $2}' | sed 's/\"//g' | sed 's/,//'`
CONFIG_SERVER_URI=`cf env $APP | grep "\"uri\":" | awk '{print $2}' | sed 's/\"//g' | sed 's/,//'`
echo "Getting token from $ACCESS_TOKEN_URI"
TOKEN=$(curl -k $ACCESS_TOKEN_URI -u "$CLIENT_ID:$CLIENT_SECRET" -d grant_type=client_credentials | jq -r .access_token)
echo "Renewing token for $APP from Vault server at $CONFIG_SERVER_URI"
curl -k -H "Authorization: bearer $TOKEN" -H "X-VAULT-Token: $VAULT_TOKEN" -H "Content-Type: application/json" -X POST "$CONFIG_SERVER_URI/vault/v1/auth/token/renew-self" -d "{\"increment\": $INTERVAL}"