Sign in Subscribe

Hashicorp Vault

Articles related with Hashicorp Vault tool.

OPNsense(23.7) - bugfix ACME Plugin Upload to Hashicorp Vault

OPNsense(23.7) - bugfix ACME Plugin Upload to Hashicorp Vault

When trying to use the OPNsense ACME Client feature to upload Let's Encrypt certificates to Hashicorp Vault, it needed to be fixed. The challenge started when the automation began to fail because it could not find the VAULT_TOKEN as an environment variable. At first, it seemed easy

OPNsense(23.7) - Acme Plugin Upload Certificates to Hashicorp Vault

OPNsense(23.7) - Acme Plugin Upload Certificates to Hashicorp Vault

Let's Encrypt certificates are a blessing, no doubt. But they come with an inconvenient fact that they short live—usually, three months. And their rotation is easy if you have just a few around; however, when you have more than ten around your infrastructure, their rotation becomes a

Vault - Update Hashicorp Container (Part III)

Vault - Update Hashicorp Container (Part III)

After having my servers down for more than six months and building my Hashicorp Vault container ten months ago, it needs to be updated when back online. Vault's documentation does not have an upgrade path but a few warnings before upgrading it. 1) Backup Vault The first recommended

GitlLab - Retrieving Secrets from Hashicorp Vault

GitLab has built in code to retrieve secrets from a Hashicorp Vault instance. However, this feature is only available to premium users. This GitLab documentation details how to use the premium feature [https://docs.gitlab.com/ee/ci/secrets/index.html]. If you do not have a premium account it

Vault - Enabling JWT Secret Engine and Creating Secrets (Part II)

Assuming you have fallowed my previous guides on how to deploy Vault and your instance is up and running. Let's enable it to GitLab Runner. 1) Root Token > Use the root token with caution. Hashicorp recommends its use in production environments only for the initial setup or

Vault - Create a Hashicorp Vault Container (Part I)

I am moving my infrastructure towards automation and with it comes the challenge of moving secrets around. We don't want secrets hard-coded into our code and flying around all over the place. GitLab suggests using hashicorp Vault to solve these issues [https://youtu.be/VYfl-DpZ5wM]. High Level Diagram