From f10ea81e3e7deb2d5a312e123751e81211e8324f Mon Sep 17 00:00:00 2001 From: Jeroen Meulemeester Date: Thu, 7 Sep 2017 10:42:31 +0200 Subject: [PATCH] vault: add page --- pages/common/vault.md | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 pages/common/vault.md diff --git a/pages/common/vault.md b/pages/common/vault.md new file mode 100644 index 000000000..df70750de --- /dev/null +++ b/pages/common/vault.md @@ -0,0 +1,27 @@ +# vault + +> HashiCorp Vault, a tool for managing secrets. + +- Create a new vault, requiring at least 2 out of 5 keyshares to unseal: + +`vault init -key-shares={{5}} -key-threshold={{2}}` + +- Unseal a vault, by providing one of the keyshares. Repeat with necessary key-shares until unsealed: + +`vault unseal {{key-share-x}}` + +- Authenticate client against vault, using an authentication token: + +`vault auth {{authentication-token}}` + +- Store a new secret in the vault: + +`vault write {{secret/hello}} value={{world}}` + +- Read a secret from the vault: + +`vault read {{secret/hello}}` + +- Seal the vault: + +`vault seal`