vault

Overview ¶

Example: HashiCorp Vault provider

Prerequisites:

1. Start Vault in dev mode: docker run -d --name vault -p 8200:8200 --cap-add=IPC_LOCK vault:1.13 server -dev -dev-root-token-id=root
2. Seed secrets (the key name is the secret path within the KV mount): VAULT_ADDR=http://localhost:8200 VAULT_TOKEN=root vault kv put secret/myapp/db host=localhost port=5432 VAULT_ADDR=http://localhost:8200 VAULT_TOKEN=root vault kv put secret/myapp/verbose value=true VAULT_ADDR=http://localhost:8200 VAULT_TOKEN=root vault kv put secret/myapp/timeout value=30s
3. Run: go run examples/vault/main.go
4. In another terminal, update a secret: VAULT_ADDR=http://localhost:8200 VAULT_TOKEN=root vault kv put secret/myapp/db host=remote port=3306 Watch the output — the update is reflected within the poll interval.