Questions tagged [vault]

VAULT QUESTIONS MUST BE DEVELOPER-RELATED. Vault is an open-source platform designed to store secrets securely, Questions about configuring vault should be asked on https://serverfault.com. Not to be confused with [ansible-vault].

300 questions
1
vote
0 answers

Spring Boot v2.6.7 and Hashicoprt vault Integration issue, unable to fetch the DB details

I am using Spring Boot v2.6.7 and trying to integrate Spring Cloud Config server, Hashicprp Vault within microservices. I went through links like: https://medium.com/geekculture/configuring-vault-with-spring-boot-100889961b50 and…
PAA
  • 1
  • 46
  • 174
  • 282
1
vote
1 answer

Hashicorp Vault Server UI loads a blank screen

I am trying to run hashicorp vault server as windows service in windows 10 system. Vault server UI is showing as blank screen. Please refer my configuration details. config.hcl ui = true backend "consul" { address = "127.0.0.1:8500" path =…
V. Periyasamy
  • 99
  • 2
  • 10
1
vote
0 answers

Vault port forwarding with Vagrant on Macos

I have a vagrant machine (almalinux/8) on my MacOS (Big Sur). I have configured my Vagrantfile to forward Vautl port config.vm.define "vault" do |s| s.vm.hostname = "vault" s.vm.network "private_network", ip: "10.30.3.2" …
samuelj
  • 123
  • 10
1
vote
1 answer

What is LIST method in http request?

There is a code snippet in vault api doc: $ curl \ --header "X-Vault-Token: ..." \ --request LIST \ http://127.0.0.1:8200/v1/ssh/roles What is LIST method in http request? I have never heard about this http method before.
Ren
  • 2,852
  • 2
  • 23
  • 45
1
vote
0 answers

nest-vault package in kubernetes cluster

I have an idea to paste dynamic database credentials in my nestJS application. For credentials storage i using Vault. Separately i installed vault client in nodejs container. This command vault write auth/approle/login role_id=$ROLE_ID…
1
vote
2 answers

How to fetch secrets from vault to my jenkins configuration as code installation with helm?

I am triying to deploy a Jenkins using helm with JCASC to get vault secrets. I am using a local minikube to create mi k8 cluster and a local vault instance in my machine (not in k8 cluster). Even that I am trying using initContainerEnv and…
alanmas
  • 61
  • 4
1
vote
1 answer

Clarifying Vault key decryption process

I'm trying to understand Vault workflow w.r.t. keys, e.g.: https://www.vaultproject.io/docs/concepts/seal As I understand, unseal (shared) keys are provided on init they're used to acquire the combined key combined key is then used to decrypt a…
deshalder
  • 507
  • 2
  • 13
1
vote
1 answer

Unable to write policy file in vault test container

I'm trying to associate a policy file in my vault test container. But It is giving me an error. Below is the command I'm running. Container.ExecResult result = vaultContainer.execInContainer("vault", "policy", "write", "admin", "- <
Geeky
  • 113
  • 9
1
vote
0 answers

exit status 2 on bash script to check HashiCorp Vault Initialization

I am trying to build a script that will initialize Vault then if not initialized, it will create keys, save them on GCP Secret Manager, via GCE instance bootstrap script. It is failing on the beginning of the if statement with this error…
dklao
  • 11
  • 1
1
vote
1 answer

Getting permission denied when using a token generated in Hashicorp vault

I am exploring Hashicorp Vault for secure storage. I have a root account setup and I have logged in to the UI and created the below given policy through the UI. The name of the policy is app-readonly. I had the policy like below path…
Saran
  • 99
  • 2
  • 14
1
vote
0 answers

How to provide secret-id for AppRole in Spring

I am using HashiCorp Vault in conjunction with the org.springframework.cloud:spring-cloud-starter-vault-config library for Spring and I need some help. I'd like to use the AppRole auth method, and I'd like to know what's the best way to provide the…
amaridev
  • 31
  • 4
1
vote
0 answers

Using static database roles with VaultSharp

I am looking into using VaultSharp to manage static roles for my Microsoft SQL Server and having a hard time getting it to work the way I expected and believe that the implementation by VaultSharp might be off in this area. This is my code that…
illug
  • 793
  • 1
  • 9
  • 23
1
vote
0 answers

is it possible to deploy vault ha cluster with minio as storage backend

is it possible to deploy hashicorp vault ha cluster with minio as storage backend ? I could see that Google cloud storage is supported with HA. I am trying to deploy HA vault in K8s cluster
1
vote
2 answers

What "Everything is path based" means in HashiCorp Vault?

In Vault documentation, specifically the policies page, there is this phrase: Everything in Vault is path based, and policies are no exception I wonder about this phrase, does it mean that in the architecture of Vault and in its internals…
Wazery
  • 15,394
  • 19
  • 63
  • 95
1
vote
3 answers

Reading secrets from Vault CLI

I'm trying to read secrets from Vault using CLI using the following commands: JWT=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) vault write auth/kubernetes/login role="${K8S_ROLE_IDENTIFIER}" jwt="${JWT}" When calling vault write, I am…
briba
  • 2,857
  • 2
  • 31
  • 59