crypto-provider-hashicorp-vault-plugin

README

Hashicorp-vault-provider

Introduction

This plugin provides key usage by using the hashicorp vault signing engine.

Usage

Put the plugin into a folder which is configured over the core env variable as module path and set additionally the envs for VAULT_ADRESS and VAULT_TOKEN

Security Advice

Before using this module, ensure that the used token has the roles for that functionality which you are planning. The root token of the vault can generate/delete keys etc. but this may not be in the intention of your application. Select the token carefully and give them just rights which the application need. Additionally generate the keys manually if required or protect them from deletion etc.