Questions tagged [vault]
Questions about Hashicorp's Vault tool for managing secrets
9
questions
1
vote
0answers
42 views
Use Vault to manage Kubernetes secrets
We are using Kubernetes on Google Kubernetes Engine - we currently have secrets added manually with the kubectl secret CLI.
To make the secrets management more secure and easier across the team, we ...
0
votes
1answer
187 views
How to Use Azure Key Vault w/ Web App
I have an Azure Web App for a client project. The project also requires Azure SQL Databases and Blob Storage. All pieces mentioned are up and running but we've been told we can't have any password ...
0
votes
0answers
32 views
How to generate Vault certificate for host without turning on allow_subdomains=true?
I'm trying to generate a Vault TLS certificate using the HTTP API, but am getting the error:
common name myhost.consul not allowed by this role.
I have a root CA that has signed an intermediate CA, ...
0
votes
0answers
72 views
Azure Disk Encryption for vm is failing while unwrapping the secret
I am new to the disk encryption. I have generated a random key using AES 256bit.
Then I created a key in Azure key vault. Using java SDK i wrapped my random key using the key I have created in Azure ...
0
votes
1answer
243 views
Consul, vault and postgres containers don't communicate
I'm trying to set up Consul with Vault for secrets management for Postgres with Docker. Here is my configuration
Dokcerfile:
FROM python:3.6-slim
ENV VAULT_VERSION 0.11.1
ENV CONSUL_VERSION 1.2.3
...
1
vote
1answer
65 views
Vault - generate secret without revealing it?
With Hashicorp's Vault, is it possbile to generate a secret without revealing that secret to the user who generated it?
Along the lines of:
vault generate secret/my/awesome/secret 32
Where it would ...
3
votes
2answers
7k views
HAproxy health check for https backend
I have haproxy configuration that works perfect for vault server in the backend with http configuration and it load balance based on unsealed and active vault server using 200 OK code. This works for ...
2
votes
2answers
1k views
Net bind capability with systemd
I am deploying Goldfish, an interface for Vault, in production on a server dedicated to secrets management. So security is of prime concern here.
I am trying to deploy the service with systemd on an ...
2
votes
0answers
109 views
Can consul-template fetch Vault servers from consul?
I would like to integrate HashiCorp vault into our current setup of consul + consul-template and was a bit surprised to find no option for consul-template to fetch the vault servers from consul's ...
