Stack Overflow
Stack Overflow

Questions tagged [vault]

VAULT QUESTIONS MUST BE DEVELOPER-RELATED. Vault is an open-source platform designed to store secrets securely, Questions about configuring vault should be asked on https://serverfault.com. Not to be confused with [ansible-vault].

300 questions
1
vote
1 answer

How to configure the OIDC config with GO package-github.com/hashicorp/vault/api

We are able to initialize/unseal and enable the vault using bellow code. newres, err := client.Sys().Init(&intireq) resseal, err := client.Sys().Unseal("xxxxxxxxxxxxxxxxxxxxx") fmt.Println("resseal:", resseal) enableopt :=…
Lucifer007
  • 107
  • 1
  • 14
1
vote
0 answers

HCP Vault - how to access private endpoint?

It might be a silly question. I’ve created Vault cluster in HCP, peered its HVN to AWS VPC, chose not to use public endpoint as this is recommended because of security reasons. But can I access then Vault UI using private URL? Or is it only for CLI…
Murakami
  • 3,474
  • 7
  • 35
  • 89
1
vote
1 answer

No key is attached while writing the secret to vault

I am trying to write a vault secret which is a file. PS C:\workspace> vault kv put -address=https://someserver.com -namespace=somenamespace secret/runtime/other/dev value="@test.pwd" Key Value --- ----- created_time …
Ashu
  • 2,066
  • 3
  • 19
  • 33
1
vote
2 answers

What am I missing to set up an HA vault cluster using raft and autounseal with transit engine

I am setting up Vault with a Raft backend and I'm attempting to set up a cluster using this guide https://learn.hashicorp.com/tutorials/vault/raft-storage I got it working without TLS, however I am experiencing errors when trying to implment TLS.…
charlietaylor
  • 143
  • 1
  • 12
1
vote
1 answer

Why read in role-id and write in secret-id in Vault AppRole auth method

I have a question about when we configure the approle auth method of the vault, After the configuration of the approle, we need the role-id and secret-id to obtain the token and to do the further vault operations. vault write…
tarun mittal
  • 331
  • 4
  • 13
1
vote
1 answer

Using Vault secrets in Kubernetes YAML

I have a secret.yaml file with the below contents, but I would like to fetch the secrets from Hashicorp Vault. This secret.yaml is basically envoy configuration to setup OAuth for my application using Okta. How can I fetch secret from Vault into my…
MKS
  • 33
  • 2
1
vote
0 answers

how to get inside Vault (ssh) with Ansible playbook?

Im using Vagrant and I want to start vault server from inside the vagrant box, via ansible playbook. to do so, without playbook, I need to execute @ vagrant ssh and then I'm in the vagrant box and can start the vault server using @ vault server…
dish
  • 11
  • 2
1
vote
0 answers

Enterprise Vault Child namespace client read secret from parent namespace

Is it possible for the vault client authenticated on the child namespace read secrets from the parent namespace?
Suresh
  • 225
  • 2
  • 7
1
vote
0 answers

Hashicorp Nomad: Can't request Vault token for terminal allocation

I have a jobspec file with multiple tasks. One of which is a "poststop" task. To be able to inject secrets from Vault, I defined the vault stanza on the task group level. The main task runs fine. However the poststop task fails with "Can't request…
ThomasMX
  • 1,643
  • 2
  • 19
  • 35
1
vote
1 answer

Terraform Get Previous Version Of Vault Secret

Is it programmatically possible to access the previous version of a Vault secret in Terraform using the vault_generic_secret resouce? If the current version of a Vault secret is 21, Terraform datasource can access the previous secret version like…
Theo Sweeny
  • 1,033
  • 14
  • 26
1
vote
0 answers

Fetching vault secrets through Flyway

I am currently working on a solution that centralizes connections to external databases. For that, I initialize a database with flyway and connect to other postgresql sources with the postrgres_fdw extension to create my table projections (with…
Hukuzard
  • 11
  • 1
1
vote
3 answers

Vault WebUI certificate

I have just built a vault server that works correctly but at each connection on the webui, I am asked to validate a certificate: Do you know why I have this message? Is it possible to bypass this problem? For information, I use a wildcard…
Mohleon
  • 11
  • 2
1
vote
1 answer

Inject vault secret into K8s configmap

I have deployed vault in K8s . I would like to know how to inject the vault secret in the configmap of a application which has all the configuration of the application.
Sowmiya
  • 57
  • 4
1
vote
2 answers

How to create a Hashicorp Vault user using Terraform

I am trying to create a Vault user in Terraform but can't seem to find the appropriate command to do so. I've searched the Terraform Registry and also performed some online searches but all to no avail. All I'm looking to do is create a user, using…
hitman126
  • 699
  • 1
  • 12
  • 43
1
vote
1 answer

Quarkus : How to disable/mock Vault for unit testing

I'm currently facing an issue with Quarkus and Vault. When I launch JUnit tests, Vault trying to start and it failed because Vault configuration is not setup to run locally. Caused by: java.lang.RuntimeException: Failed to start quarkus at…
Maxime Brassart
  • 45
  • 7
1 2 3
…
19 20