HashiCorp Vault

Connects Kotharo to HashiCorp Vault for secrets. All adapters

What you need

• The vault command, from Vault.
• The jq command, from jq.

Connect

/kotharo:setup finds HashiCorp Vault and takes you through these steps. To connect it by hand:

Install Vault. Its install page covers other systems.

macOS:

brew tap hashicorp/tap && brew install hashicorp/tap/vault

Windows, in Git Bash:

choco install vault

Linux:

brew tap hashicorp/tap && brew install hashicorp/tap/vault

Install jq. Its install page covers other systems.

macOS:

brew install jq

Windows, in Git Bash:

winget install jqlang.jq

Linux:

sudo apt-get install jq

Sign in

Set VAULT_ADDR (and VAULT_NAMESPACE, if you use one), then run vault login -method=<method> -no-print with your team's sign-in method, such as oidc. Your token needs list and read on <mount>/metadata/*, and nothing on <mount>/data/*.

To check you are signed in, run vault token capabilities sys/mounts.