Vault Configuration Source

HashiCorp Vault secrets management integration.

Installation

dotnet add package Apq.Cfg.Vault

Default Level

The default level for this configuration source is CfgSourceLevels.Vault (300).

If you don't specify the level parameter, the default level will be used:

// Uses default level 300
.AddVault(options => { ... })

// Specify custom level
.AddVault(options => { ... }, level: 350)

Basic Usage

using Apq.Cfg;
using Apq.Cfg.Vault;

var cfg = new CfgBuilder()
    .AddVault(options =>
    {
        options.Address = "http://localhost:8200";
        options.Token = Environment.GetEnvironmentVariable("VAULT_TOKEN");
        options.SecretPath = "secret/data/myapp";
    })  // Uses default level 300
    .Build();

Configuration Options

Option	Type	Default	Description
Address	string	Required	Vault server address
Token	string	Required	Authentication token
SecretPath	string	Required	Secret path
MountPoint	string	"secret"	Secrets engine mount point

Authentication Methods

• Token authentication
• AppRole authentication
• Kubernetes authentication

Next Steps

• Consul - Consul configuration
• Encryption & Masking - Local encryption