As the title says I am working on planning a way to backup postgres using chef and vault. Idea is that we already encrypt the backups from postgres using a key (random binary string) and we would like to keep that going. We would like to store that string in Hashicorp Vault. My issue is I am not sure how to get it so that the key is made into a file then a few scripts are run. Then comes the issue that a more senior person wants these backups to only be weekly not every time the cookbook runs which if memory serves me right is every 24 hours.
I am not sure the best way to access the secrets in Vault from a chef cookbook. Nor have it run weekly.
I would have preferred to do this with cron jobs and bash scripts, but sadly that is not an option.