Secret Provider Setup Example

Note: This feature is available in Lite, Enterprise, and Ultimate editions only.

Table of contents

• Enable KV secrets engine
• Create a secret
• Create a connection

This guide shows a basic setup for a secret provider using the web UI. The example uses HashiCorp Vault, but the same approach applies to other providers.

Enable KV secrets engine

1. Open the Vault UI.

2. Go to Secrets Engines.

3. Click Enable new engine +.

4. Select KV, set Path to secret, and click Enable Engine.

   

Tip: If KV is already enabled, reuse the existing mount path.

Create a secret

1. Go to Secrets Engines -> secret.

2. Click Create secret +.

3. Enter name.

4. Add key-value pairs.

   

5. Click Save.

Create a connection

1. Start creating a connection.

2. In the Create Connection wizard, go to the Main tab, choose secret provider configuration and enter the secret name in the Secret parameters field.

   

   Note: Secret name format depends on the provider. See Secret name format.

3. If required fields are missing in the secret, enter them manually.

4. Click Test Connection to verify your settings.

5. Click Finish to save the connection.