Integrate with HashiCorp Vault
You can integrate HashiCorp Vault with Itential Platform so that Platform retrieves credentials from Vault at runtime. Platform doesn’t write sensitive values to its MongoDB database. Instead, your Platform configurations contain only a reference to a secret that’s stored in Vault.
OpenBao, the open-source Vault-compatible alternative, uses the same configuration and secret reference syntax. All instructions in this section apply to both HashiCorp Vault and OpenBao.
Benefits
Integrating Platform with Vault provides the following benefits:
- Centralized secret storage across your organization.
- Enterprise-grade security with token and AppRole authentication.
- Secret versioning and comprehensive audit trails.
- Automated credential rotation when you restart Platform.
- Integration with your existing HashiCorp Vault or OpenBao infrastructure.