This shows you the differences between two versions of the page.
|
hashicorp_vault [2026/01/13 11:28] val created |
hashicorp_vault [2026/01/13 12:08] (current) val |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Hashicorp Vault ====== | ====== Hashicorp Vault ====== | ||
| + | <code> | ||
| + | # docker run -d --name my-vault -p 8200:8200 hashicorp/vault:latest | ||
| + | |||
| + | # docker logs my-vault | ||
| + | </code><code> | ||
| + | ... | ||
| + | Unseal Key: P0NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN8= | ||
| + | Root Token: hMMMMMMMMMMMMMMMMMMMMMMMMMV | ||
| + | ... | ||
| + | </code><code> | ||
| + | # docker exec -ti my-vault sh | ||
| + | |||
| + | / # export VAULT_ADDR='http://0.0.0.0:8200' | ||
| + | |||
| + | / # vault login token=hMMMMMMMMMMMMMMMMMMMMMMMMMV | ||
| + | |||
| + | / # vault kv put ansible/projects/openvpn1 \ | ||
| + | username=student \ | ||
| + | password=password | ||
| + | |||
| + | / # vault policy write projects-ansible - <<EOF | ||
| + | path "ansible/projects/*" { | ||
| + | capabilities = [ "read" ] | ||
| + | } | ||
| + | EOF | ||
| + | |||
| + | / # vault token create -policy="projects-ansible" | ||
| + | Key Value | ||
| + | --- ----- | ||
| + | token hKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKU | ||
| + | token_accessor vPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPp | ||
| + | token_duration 768h | ||
| + | token_renewable true | ||
| + | token_policies ["default" "projects-ansible"] | ||
| + | identity_policies [] | ||
| + | policies ["default" "projects-ansible"] | ||
| + | </code> | ||
| + | |||