Questions tagged [hashicorp-vault]
For questions about HashiCorp's Vault product - a tool for managing tokens, passwords, certificates, API keys, and other secrets.
0
votes
1answer
63 views
How to pass HashiCorp Vault secrets(k/v passwords) to Terraform EC2 instance
How can we pass HashiCorp Vault secrets, k/v username/password and feed Terraform while its creating Ec2 instance.
For example, i don't want to use in plain text
variable "myvariable" {
default = "...
0
votes
0answers
18 views
Is there somebody who has deployed Hashicorp Vault and what are your experiences?
We are planning to install hashicorp vault on gcp. The first idea is to use terraform and two roles were found:
https://github.com/hashicorp/terraform-google-vault/tree/master/examples
https://github....
0
votes
0answers
36 views
What does implementing Hashicorp Vault mean in practice?
I have read several Hashicorp Vault tutorials and one of the features that could be used is generating ssh keys for git clone repositories, but that implies that everybody in the company that clones ...
0
votes
0answers
29 views
How to securely distribute and use Nexus credentials?
Nexus has been implemented in the company a couple of months ago. The side effect is that credentials are required to download artifacts and thus everybody that compiles the code requires a password.
...
3
votes
1answer
76 views
Why HashiCorp vault returning null?
I have a HashiCorp vault setup and it seems to return null all the time except when I ssh into the VM and then I set the values again followed by checking the values directly on the vault server.
Any ...
4
votes
0answers
62 views
What is the most secure way to initially enter data into Hashicorp Vault? [closed]
I would like to implement Vault in my development environment. I wonder what the best practices are to initially enter data into secret managment systems. The admin can always manually enter the data ...
0
votes
3answers
3k views
Access vault secret from bash script
I am looking for help on a direction on where to go from here. I have a Hasicorp Vault server running and accessible over DNS (local). I need to have a script get a secret from it then use that secret....
0
votes
1answer
592 views
cannot validate certificate for 127.0.0.1 because it doesn't contain any IP SANs | Vault
I am getting the below error when I go to read or do anything with a Hashicorp Vault. It doesn't want to work at all. I had it working locally last week and nothing I know of has changed other than ...
1
vote
2answers
168 views
Hashicorp vault not writing out KV
I am trying to set up a Hashicorp Vault server and have ran into some more road blocks. I can not get it so that I can write/read data either locally or through a domain name (I know the risks of have ...
0
votes
1answer
29 views
Planning a backup system using postgress, chef and vault
As the title says I am working on planning a way to backup postgres using chef and vault. Idea is that we already encrypt the backups from postgres using a key (random binary string) and we would like ...
2
votes
0answers
2k views
HashiCorp Vault as a Password Manager [duplicate]
Can HashiCorp's Vault Be Used as a Password Manager similar to TeamPass?
2
votes
2answers
172 views
How to unseal a Vault in practice?
It is possible to force that multiple keys have to be entered in order to unseal the vault. How does this work in practice? If someone has entered a key and there is another key required to unseal the ...
3
votes
2answers
434 views
Is there an organization that offers a Hashicorp Vault SaaS solution?
There is a number of recommendations to harden a Hashicorp Vault deployment, but is there a SaaS solution, like CloudBees offers Jenkins to prevent that the hardening should be done manually?
0
votes
1answer
205 views
Is Hashicorp's Vault suitable for personal projects as well?
The Vault documentation indicates that there is a master key and that multiple keys are required to access the secrets, but does this mean that Vault is not suitable for personal projects if there is ...
2
votes
2answers
710 views
What are best practices for running Hashicorp's Vault in terms of high availability?
The Production Hardening document indicates how to harden Vault for production purposes, but what if Vault is run on for example Digital Ocean and the platform is unavailable or the disk gets ...
1
vote
1answer
318 views
Is it possible to recover accidentally deleted HashiCorp's Vault secrets?
According to this tutorial, it is possible to delete a secret, by running:
vault delete secret/hello
What will if someone in the organization accidentally removed a secret. Is it still possible to ...
5
votes
2answers
3k views
How does Hashicorp's Vault compare to Lastpass?
In this section Hashicorp compares Vault with other solutions. How does Hashicorp's Vault compare to Lastpass?
Attempt to answer the question
It is possible to login to LastPass from a web browser, ...
0
votes
1answer
134 views
What are best practices for sharing and accessing Vault secrets?
When one follows a Hashicorp's Vault demo, one has to issue vault init -key-shares=1 -key-threshold=1 at a certain moment that generates a key 1 and root token:
Key 1: ABC
Root Token: XYZ
If person ...
7
votes
1answer
699 views
Use Vault SSH OTP backend with Jenkins
I'm setting up Vault to store secrets. SSH backend with OTP auth looks like a good way to stop managing SSH keys for access.
I have SSH backend working, and am looking at hooking up Jenkins with the ...
