Hashicorp Vault

This article is a Draft. Help us to complete it.

macOS Installation

brew install vault

 To have launchd start vault now and restart at login:
  brew services start vault
Or, if you don't want/need a background service you can just run:
  vault server -dev

Commands

vault -version

Starting vault:

vault server -dev
.../... 

export VAULT_DEV_ROOT_TOKEN_ID="s.TVr0O4kUldB9uPKOkq78XJPT" export VAULT_ADDR='http://127.0.0.1:8200' vault status Key Value --- ----- Seal Type shamir Initialized true Sealed false Total Shares 1 Threshold 1 Version 1.3.4 Cluster Name vault-cluster-2ebb06b4 Cluster ID b4fc7a4e-874b-a219-df41-b9ddb9dgg581 HA Enabled false

vault server -dev

Error initializing listener of type tcp: listen tcp 127.0.0.1:8200: bind: address already in use

 vault kv put secret/hello foo=world
 Get https://127.0.0.1:8200/v1/sys/internal/ui/mounts/secret/hello: dial tcp 127.0.0.1:8200: connect: connection refused

vault kv put secret/hello foo=world
Get https://127.0.0.1:8200/v1/sys/internal/ui/mounts/secret/hello: http: server gave HTTP response to HTTPS client

vault server -config vault-config.hcl
error loading configuration from vault-config.hcl: stat vault-config.hcl: no such file or directory

Changelog

2015

https://github.com/hashicorp/vault/blob/master/CHANGELOG.md

https://www.hashicorp.com/blog/vault-1-3/

vault debug (1.3)

• Raft Storage Backend
• Support for storing Vault data in within Oracle Cloud Infrastructure Object Storage (1.3)
• Database Static Credential Rotation (1.2)
• InfluxDB Database Plugin (1.1)
• Manage GCP CKMS keys from within Vault. (1.0)
• Duo Multi-Factor Authentication (MFA) support (0.3)

See also

• Consul template
• Secrets: Kubernetes secrets, ansible-vault, Hashicorp Vault, AWS Secrets Manager, Google Secret Manager, git-crypt, SOPS: Secrets OPerationS, Google Cloud Secret Manager, GitHub secret scanning alerts
• GDPR
• HashiCorp: HCP, Terraform, Vault, Nomad, Vagrant, Sentinel, Consul, Packer, Waypoint, Boundary, Mitchell Hashimoto, Armon Dadgar