VAULT QUESTIONS MUST BE DEVELOPER-RELATED. Vault is an open-source platform designed to store secrets securely, Questions about configuring vault should be asked on https://serverfault.com. Not to be confused with [ansible-vault].
Questions tagged [vault]
300 questions
0
votes
1 answer
Deploy Vault and consul agent in same pod with TLS using helm
I m planning to use Vault Service as HA with Consul Backend with TLS using helm deployment for both consul and vault.
I have already deployed consul using helm deployment in my EKS cluster. This would deploy consul client as a daemonset and consul…
td4u
- 402
- 5
- 17
0
votes
1 answer
How to add metadata to approle entity using vault provider for terraform
I need to add metadata to approle entity because policy path associated with approle is based on entity metadata. What i try to achieve is basically to do this command vault write identity/entity/id// metadata=stage=testusing vault…
adamo89
- 39
- 1
- 1
- 6
0
votes
1 answer
Not able to login to concourse from GUI
I have installed concourse ci with integration vault and database postgress SQL using below link.
Done with all the steps given in below link and all 4 docker container is working fine…
0
votes
0 answers
vault agent injector bad cert
I have vault deployed from the official helm chart and it's running in HA mode, with auto-unseal, TLS enabled, raft as the backend, and the cluster is 1.17 in EKS. I have all of the raft followers joined to the vault-0 pod as the leader. I have…
Byron Mansfield
- 613
- 1
- 6
- 19
0
votes
1 answer
Start Vault Server in Dev mode using vault.service file
I have tried to give a custom config file to start the vault server, in the vault.service file and is working as expected.
But if i try to start the vault server in dev mode changing
ExecStart=/usr/local/bin/vault/vault server -dev, in this case…
Aditya Ch
- 100
- 7
0
votes
1 answer
Hashicorp Vault Kerberos Auth with VaultSharp
I'm having great difficulty getting Kerberos Auth working with Vault using VaultSharp.
I don't have control over Vault server but I've been informed that it is configured and ready to use.
I'm using .NET running in IIS and I want to make use of the…
PostureOfLearning
- 3,481
- 3
- 27
- 44
0
votes
1 answer
How can I encrypt data with an already generated AES 256 GCM 96 key (coming from Hashicorp Vault)?
I have a String representing a symmetric key, obtained by using Hashicorp Vault (this may not be important actually). I need this key to encrypt big files, so I cannot send the file directly to Vault asking it to encrypt the data. I want to do it…
Apokalos
- 124
- 1
- 2
- 13
0
votes
0 answers
Vault with airflow on kubernetes
I installed vault as a separate service with kubernetes as auth. I installed minikube and installed airflow on it. I enabled apache-airflow kubernetes as well.
Once I start airflow with kubernetes, I want to connect it to vault using airflow secret…
esha ingle
- 163
- 1
- 3
- 18
0
votes
1 answer
hashicorp vault agent template fails when starts with "no known secret ID"
Start vault agent using template:
vault agent -config=templates/config.hcl -log-level=debug
Fails with the following error:
[ERROR] auth.handler: error getting path or data from method: error="no known secret ID" backoff=2.438818298
Steps for…
Víctor Oriol
- 492
- 4
- 15
0
votes
0 answers
Consul HA ACL init fail on OpenShift
I try to install Consul HA to configure my Vault HA on OpenShift platform. I am first using Consul Helm chart to install it and I can successfully install it using some SCC for my client and server serviceAccounts.
Later on, I wanted to deploy…
ixxeL
- 23
- 4
0
votes
2 answers
How to get WSUS server details from CyberArk Vault server?
When checked at path Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update, I don't see any detail for WSUS.
Please tell what's the other way to check WSUS server details
enter image description here
-1
votes
0 answers
How to store SSH private host keys securely in Terraform?
Our Terraform code is stored in Git. The SSH private host keys are stored there too. Terraform pushes these keys each time the VMs are (re)created.
For Ansible we store private data in an Ansible Vault. AFAIK Terraform doesn't have such an encrypted…
Michael
- 2,528
- 3
- 21
- 54
-1
votes
0 answers
cert-manager issuer unable to connect to vault
Specifications
kubernetes version: 1.24.9
Cert-Manager Version: 1.7.2
vault version: 0.23.0
ERROR
* permission denied
cert-manager/clusterissuers "msg"="error setting up issuer" "error"="error reading Kubernetes service account token from…
jobin george
- 179
- 1
- 8
-1
votes
1 answer
Unable to add member to vault group with terraform
I'm here because I'm a beginner with terraform and I need some help.
I'm able to create policy and group with terraform on vault :
provider "vault" {
address = var.vault_address
token = var.vault_token
}
resource "vault_policy"…
Ezzmazz
- 113
- 5
-1
votes
1 answer
What is the best way to install helm charts having vault secrets on local k8s cluster?
I use helm charts for k8s deployment. And chart has secrets from Hashicorp's Vault and I use ArgoCD to automate deployments and argocd-vault-plugin take care injecting vault secrets from vault server before installing helm charts on GKE k8s…
pgollangi
- 848
- 3
- 13
- 28