Questions tagged [vault]
Questions about Hashicorp's Vault tool for managing secrets
23
questions
1
vote
0answers
18 views
docker vault busy box container ps does not have -p option get uptime of process
I'm trying to get an uptime of a process in a docker container in seconds that uses busybox.
when i run the command ps -p 6 it says ps: unrecognized option: p
whats going on here? is there a way for ...
0
votes
1answer
69 views
Managing Authentication on REST APIs
The scenario is, I want to manage authentication in several REST APIs deployed in different environments.
I've been reading about the Vault, and apparently, it has this feature.
With Vault is possible ...
0
votes
1answer
73 views
How to permanently set vault token and url remote server in macos
On Linux I'm setting vault variables to /etc/environment next:
export VAULT_URL='https://some-remote-server.org:8200/'
export VAULT_TOKEN='SoMeToKeN'
But when I'm typeing this in macos, after $> ...
0
votes
1answer
24 views
Azure Retention policy for new servers - will the first backup be retained long term
We have an Azure tenancy with a a backup policy doing Daily(retained 30days), weekly (retained 10 weeks), and Annual (triggered on first SAT in JAN, retained for 7 years).
I have just migrated a bunch ...
1
vote
1answer
52 views
How to run Hashicorp Vault as a service on CentOS in production
I'm running the latest CentOS and I need Hashicorp Vault 1.6.3 to run as a service. I'm currently using the kv/secret background, so I can use
Vault kv put secret/test/hello foo=bar
In order to store ...
1
vote
1answer
219 views
Store AWX/Ansible Tower Database password is HashiCorp Vault
With AWX and Ansible Tower, I know you can use HashiCorp Vault to manage the passwords that you use inside your playbooks. For instance if you want to configure some network devices, the credentials ...
0
votes
0answers
36 views
hashicorp vault and nesting of secret engines/secrets?
The structure as seen in VAULT UI is
engine/userpasslist/db_admin_pass
and I am trying to get password db_admin_pass only.
Following code works fine:
curl --header "X-Vault-Token: s....
1
vote
1answer
117 views
Shift HashiCorp Vault secrets from one path (sub dir) to another
Good morning !
I am using Vault from HashiCorp and would like to move secrets and secrets structure around.
I have a bunch of secrets under a path, let say:
boo/foo/
boo/foo/bar/secret1
boo/foo/bar/...
0
votes
1answer
147 views
OCSP setup for Vault
I have vault setup running in container for PKI Secrets Engine and would like to add OCSP support for application to check if certificate is not revoked. I didn’t find any explanation on how to setup ...
1
vote
0answers
455 views
Vault invalid certificate or no client certificate supplied - cert auth method
I have created a CA in Vault to handle my certificate creation. I've followed this guide here: https://learn.hashicorp.com/vault/secrets-management/sm-pki-engine
I am trying to generate a client ...
3
votes
3answers
1k views
Securing SSL certificate private key with nginx
I've been researching how to secure privaye keys for SSL certificats using nginx as a webserver, but have not been able to find many satisfactory answers.
Specifically, for a client who wants to me ...
1
vote
0answers
364 views
How to store Vault audit logs when running vault in a Docker container
I'm researching the various audit devices for Hashicorp Vault. My goal is to run Vault in a Docker environment (currently Docker Swarm). The File method is fairly straightforward, but I'm also ...
0
votes
1answer
263 views
Vault pod going to crashLoopBackOff state on restarting
We have configured vault to run as a pod in the cluster. In the below deployment YAML file, we have included the vault initialisation and unsealing to happen when the pod comes up initially. But when ...
0
votes
1answer
124 views
Trying to deploy vault:1.2.4 in kubernetes
I have been trying to bring up a Vault pod in K8!, I am using vault:1.2.4
and I have added the capability and config in the yaml as mentioned in the official docker page of vault
But still, I always ...
0
votes
2answers
221 views
vault init hangs on kubernetes
I'm trying to set up an autosealing vault cluster in kubernetes but I'm seeing some strange behaviour.
I have one vault providing the transit secret to autounseal the second vault . They are running ...
3
votes
1answer
3k views
Hashicorp Vault - Policy restricting one specific sub node in a path
I have a Hashicorp Vault server configured and everything is running great, except for my "deny" policies.
I have a 2 level grouping for the majority of secrets, so they follow the structure of:
...
1
vote
1answer
259 views
Use Vault to manage Kubernetes secrets
We are using Kubernetes on Google Kubernetes Engine - we currently have secrets added manually with the kubectl secret CLI.
To make the secrets management more secure and easier across the team, we ...
0
votes
1answer
1k views
How to Use Azure Key Vault w/ Web App
I have an Azure Web App for a client project. The project also requires Azure SQL Databases and Blob Storage. All pieces mentioned are up and running but we've been told we can't have any password ...
0
votes
1answer
469 views
Consul, vault and postgres containers don't communicate
I'm trying to set up Consul with Vault for secrets management for Postgres with Docker. Here is my configuration
Dokcerfile:
FROM python:3.6-slim
ENV VAULT_VERSION 0.11.1
ENV CONSUL_VERSION 1.2.3
...
2
votes
1answer
738 views
Vault - generate secret without revealing it?
With Hashicorp's Vault, is it possbile to generate a secret without revealing that secret to the user who generated it?
Along the lines of:
vault generate secret/my/awesome/secret 32
Where it would ...
10
votes
2answers
26k views
HAproxy health check for https backend
I have haproxy configuration that works perfect for vault server in the backend with http configuration and it load balance based on unsealed and active vault server using 200 OK code. This works for ...
6
votes
2answers
8k views
Net bind capability with systemd
I am deploying Goldfish, an interface for Vault, in production on a server dedicated to secrets management. So security is of prime concern here.
I am trying to deploy the service with systemd on an ...
2
votes
0answers
145 views
Can consul-template fetch Vault servers from consul?
I would like to integrate HashiCorp vault into our current setup of consul + consul-template and was a bit surprised to find no option for consul-template to fetch the vault servers from consul's ...
