HashiCorp Vault

HashiCorp Vault is a secrets manager.

Authentication

• Vault token

Actions

Generic API request. Call any Vault HTTP API endpoint on this connection, for the case where no shipped action covers it yet. The connection supplies the Vault address, the token header, the namespace header and the egress route, so only the path, query and body are yours to fill.

• Decrypt with transit keyUnwrap a ciphertext that Vault's transit engine produced, returning the original payload as standard base64 under body.data.
• Encrypt with transit keyEncrypt a small payload with a named key on Vault's transit secrets engine, without the key ever leaving Vault.
• List transit keysList the key names on a transit mount, which is how you discover a value to pass as keyName to hashicorpvault:transitencrypt or hashicorpvault:transitdecrypt.

Product names, logos and brands are the property of their respective owners and are used here for identification only. Their use does not imply endorsement by, or affiliation with, those owners.