Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [vault]

Questions about Hashicorp's Vault tool for managing secrets

42 questions
1
vote
0 answers

Unable to fetch Vault Token for Pod Service Account

I am using Vault CSI Driver on Charmed Kubernetes v1.19 where I'm trying to retrieve secrets from Vault for a pod running in a separate namespace (webapp) with its own service account (webapp-sa) following the steps in the blog. As I have been able…
sanakhanlibre
  • 11
  • 3
1
vote
1 answer

Store AWX/Ansible Tower Database password is HashiCorp Vault

With AWX and Ansible Tower, I know you can use HashiCorp Vault to manage the passwords that you use inside your playbooks. For instance if you want to configure some network devices, the credentials for accessing these devices could reside in the…
Paul Mintoumba
  • 11
  • 1
1
vote
1 answer

Shift HashiCorp Vault secrets from one path (sub dir) to another

Good morning ! I am using Vault from HashiCorp and would like to move secrets and secrets structure around. I have a bunch of secrets under a path, let…
yield
  • 771
  • 1
  • 9
  • 24
1
vote
1 answer

OCSP setup for Vault

I have vault setup running in container for PKI Secrets Engine and would like to add OCSP support for application to check if certificate is not revoked. I didn’t find any explanation on how to setup OCSP for vault also not clear information in any…
roy
  • 119
  • 1
  • 2
  • 15
1
vote
0 answers

How to store Vault audit logs when running vault in a Docker container

I'm researching the various audit devices for Hashicorp Vault. My goal is to run Vault in a Docker environment (currently Docker Swarm). The File method is fairly straightforward, but I'm also interested in syslog. Has anyone successfully used the…
wsams
  • 121
  • 6
0
votes
1 answer

Trying to deploy vault:1.2.4 in kubernetes

I have been trying to bring up a Vault pod in K8!, I am using vault:1.2.4 and I have added the capability and config in the yaml as mentioned in the official docker page of vault But still, I always get the error: Error loading configuration from…
Ani
  • 32
  • 2
  • 13
0
votes
2 answers

vault init hangs on kubernetes

I'm trying to set up an autosealing vault cluster in kubernetes but I'm seeing some strange behaviour. I have one vault providing the transit secret to autounseal the second vault . They are running in the same k8s cluster in separate namespaces.…
Javier PR
  • 101
  • 2
0
votes
1 answer

How to Use Azure Key Vault w/ Web App

I have an Azure Web App for a client project. The project also requires Azure SQL Databases and Blob Storage. All pieces mentioned are up and running but we've been told we can't have any password stored in the web.config or in the azure portal…
jrd1989
  • 698
  • 15
  • 48
0
votes
1 answer

Consul, vault and postgres containers don't communicate

I'm trying to set up Consul with Vault for secrets management for Postgres with Docker. Here is my configuration Dokcerfile: FROM python:3.6-slim ENV VAULT_VERSION 0.11.1 ENV CONSUL_VERSION 1.2.3 RUN apt-get update \ && apt-get install -y \ …
kebie
  • 141
  • 1
  • 1
  • 7
0
votes
0 answers

How to declare Vault secrets containing equals sign as environment variables using Kubernetes?

I want to declare Vault secrets as environment variables while using Kubernetes with following configuration: [...] apiVersion: apps/v1 kind: Deployment metadata: name: consumer-xyz spec: replicas: 1 selector: matchLabels: app:…
Kalmar
  • 111
  • 1
0
votes
0 answers

Backing up vault configuration changed in UI

I have a config.hcl file that I used to configure my vault instance. In the UI, I enabled Vault Usage Metrics, which I can see now enabled at sys/internal/counters/config but I don't see anything related to that in the config.hcl file, so I suppose…
Jason
  • 101
0
votes
0 answers

Using Azure API Gateway to expose azure keyvault api to client application

Currently a client application works directly over internet with Azure Keyvault to get secret stored in the Keyvault. Azure service principal is used on client side for authentication to the Keyvault and this service principal has GET, LIST…
rauf101
  • 1
0
votes
0 answers

Vault init-container not injected into Pod with Kubernetes

I have the following (very basic) StatefulSet in Kubernetes: apiVersion: v1 kind: Service metadata: name: nginx labels: app: nginx spec: ports: - port: 80 name: web clusterIP: None selector: app: nginx --- apiVersion:…
C-nan
  • 131
  • 2
0
votes
0 answers

Enable Vault JWT using `-tls-skip-verify` with EKS ca.crt fails with `x509: certificate signed by unknown authority`

We need to enable JWT auth in vault which is hosted within our EKS cluster in preparation for using K8s 1.24 OIDC and testing token renewal with Vault. I'm following documentation from a few…
Jim
  • 355
  • 1
  • 4
  • 14
0
votes
1 answer

Hashicorp Vault How Do I Login Headless From STDIN Using Bash Shell?

Given a Bash Shell say in a Docker container running on Gitlab, for example, how would I get the password to get passed in? When I login with this: $ vault login -method=ldap username=myusername It asks me for a password. How do I get the prompt…
Frederick Ollinger
  • 203
  • 2
  • 8
1
2
3