diff --git a/pages/common/vault.md b/pages/common/vault.md new file mode 100644 index 000000000..df70750de --- /dev/null +++ b/pages/common/vault.md @@ -0,0 +1,27 @@ +# vault + +> HashiCorp Vault, a tool for managing secrets. + +- Create a new vault, requiring at least 2 out of 5 keyshares to unseal: + +`vault init -key-shares={{5}} -key-threshold={{2}}` + +- Unseal a vault, by providing one of the keyshares. Repeat with necessary key-shares until unsealed: + +`vault unseal {{key-share-x}}` + +- Authenticate client against vault, using an authentication token: + +`vault auth {{authentication-token}}` + +- Store a new secret in the vault: + +`vault write {{secret/hello}} value={{world}}` + +- Read a secret from the vault: + +`vault read {{secret/hello}}` + +- Seal the vault: + +`vault seal`