344 questions
Best practices
0
votes
2
replies
58
views
Mitigating damage to Vault secrets in the circumstance of compromise
I have one hashicorp vault instance running in a container. My app authenticates against this with approle auth, and requests the secrets at runtime. The secrets include keys that can not be created ...
0
votes
0
answers
80
views
Vault Agent template command cannot chown generated PostgreSQL certificates to UID/GID 70:70 (Postgres container user)
I am using HashiCorp Vault Agent (sidecar) to dynamically generate and rotate TLS certificates for a PostgreSQL container. The certificates are written to a shared volume (/vault/certs/postgres) that ...
- 649
1
vote
0
answers
78
views
Can I store JSON object in Azure key vault? just like I would in DB, I'd want to store it using a POST route and also GET it
An encrypted license file which I'm storing as an JSON object in my DB.
I want to store it in azure key vault for security reasons.
Is it possible to store it in azure key vault using POST route and ...
- 1
1
vote
0
answers
99
views
Spring Boot Vault client connects to localhost instead of configured IP
I have a spring boot microservices demo. My vault instance is running in Docker in Google Cloud VM.
Dependency in config server pom.xml:
<dependency>
<groupId>org.springframework.cloud&...
-1
votes
2
answers
424
views
Python hvac implementation to retrieve secrets [closed]
I am working on a Python sample code for the first time. This is about how to retrieve secrets from Hashicorp Vault secrets manager API; hvac.client.secrets.kv.v2, my code is as follows:
# 1. Setup ...
- 1
0
votes
0
answers
113
views
How to auto-unseal Vault and securely load secrets for a Node.js app without KMS, HSM, or external servers (fully self-hosted on client machine)?
I’m setting up HashiCorp Vault to manage .env secrets for a Node.js application, and I want the entire system — including Vault, PostgreSQL, and the app — to run entirely on the client’s local server, ...
0
votes
0
answers
97
views
how to retrieve secrets from jenkins to migrate them to vault hashicorp
I want to know how to use jenkins plugins to list all of ly jenkins credentails with SystemCredentialsProvider
I used :
def credsStore = jenkinsInstance.getExtensionList('com.cloudbees.plugins....
- 1
0
votes
1
answer
216
views
Can't seem to make Vault search for matching role from JWT claims
I'm having a problem with the community version of Vault (v1.20.0).
My understanding is that if I set up a JWT auth method, Vault will search all of the roles to find one that matches the claims ... ...
0
votes
1
answer
138
views
Setting environment variables in deployment from Vault secret
I have configured delivery of secrets from Valt to kubernetes cluster. configured via CSI with creation of SecretProviderClass. secret put in volume:
...
volumeMounts:
- name: secrets-store-...
- 23
0
votes
2
answers
123
views
fetch a specific KV pair from a set of KVs defined at a path
In Hashicorp vault, how do I fetch a specific KV pair from a set of KVs I have defined at a certain path?
For eg, if I define multiple key-value pairs under /mysecrets, I have to do this:
http://...
- 7,866
0
votes
2
answers
261
views
When creating a container, the error "secret not found" appears [closed]
I'm trying to use Vault CSI Provider to get secrets and HCP Vault
Made the following policy and role on terraform:
resource "vault_policy" "n8n" {
name = "n8n"
...
2
votes
1
answer
590
views
Unable to read Hashicorp Vault Secrets using Spring Boot
I'm using Spring Boot 3.4.3, Java 21 and Windows 11 Pro. I'm trying to read secrets from Hashicorp Vault. I followed various tutorials such as this one but reading credentials has never worked ...
- 19.5k
0
votes
0
answers
125
views
Is it possible to grab a vault value in a Java unit test?
I have a java app that populates a class's member variables with values that are saved in vault by injecting an instance of the class into the service rather than explicitly calling the class's ...
- 867
1
vote
0
answers
294
views
Issue passing a pem certificate (multi line string) retrieved from Vault to SpringBoot application.yml
What I would like to achieve is to retrieve a PEM certificate stored in Vault and configure it inside an application.yml file correctly so the SpringBoot app can read it.
This is a working sample (...
- 5,566
2
votes
1
answer
138
views
Spring boot config server doesn't load properties from Vault
I have a problem with the Spring Boot Config Server.
Here is my pom.xml
<parent>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent<...
- 21
