Secret Provider Setup Example

Note: This feature is available in Enterprise and AWS editions only.

Table of contents

• Enable KV secrets engine
• Create a secret
• Create a connection

This guide shows a basic setup for a secret provider using the web UI. The example uses HashiCorp Vault, but the same approach applies to other providers.

Enable KV secrets engine

1. Open the Vault UI.

2. Go to Secrets Engines.

3. Click Enable new engine +.

4. Select KV, set Path to secret, and click Enable Engine.

   

Tip: If KV is already enabled, reuse the existing mount path.

Create a secret

1. Go to Secrets Engines -> secret.

2. Click Create secret +.

3. Enter name.

4. Add key-value pairs.

   

5. Click Save.

Create a connection

1. Start creating a connection.

2. In the Create Connection wizard, go to the Main tab, choose a Configuration Name and enter the Secret Name in the Secret Parameters section.

   

   Note: Secret name format depends on the provider. See Secret name format.

3. If required fields are missing in the secret, enter them manually.

4. Click Test to verify your settings.

5. Click Create to save the connection.