Home

Welcome to the node-vault wiki!

Supported features

Secrets Engines

• AliCloud
• AWS
• Azure
• Consul
• Cubbyhole
• Google Cloud
• Google Cloud KMS
• KMIP
• Kubernetes
• MongoDB Atlas
• Nomad
• LDAP
• PKI
• RabbitMQ
• SSH
• Terraform Cloud
• TOTP
• Transform
• Transit

Database

• Cassandra
• Couchbase
• Elasticsearch
• InfluxDB
• HanaDB
• MongoDB
• MongoDB Atlas
• MSSQL
• MySQL/MariaDB
• Oracle
• PostgreSQL
• Redis
• Redis ElastiCache
• Redshift
• Snowflake

Identity

• Entity
• Entity Alias
• Group
• Group Alias
• Identity Tokens
• Lookup
• OIDC Provider

MFA

• Duo
• Okta
• PingID
• TOTP
• Login Enforcement

Key/Value

• K/V Version 1
• K/V Version 2

Key Management

• Azure Key Vault
• AWS KMS
• GCP Cloud KMS

Auth Methods

• AliCloud
• AppRole
• AWS
• Azure
• Cloud Foundry
• GitHub
• Google Cloud
• JWT/OIDC
• Kerberos
• Kubernetes
• LDAP
• OCI
• Okta
• RADIUS
• SAML
• TLS Certificates
• Token
• Username & Password

System Backend

• /sys/audit
• /sys/audit-hash
• /sys/auth
• /sys/capabilities
• /sys/capabilities-accessor
• /sys/capabilities-self
• /sys/config/auditing/request-headers
• /sys/config/control-group
• /sys/config/cors
• /sys/config/group-policy-application
• /sys/config/reload
• /sys/config/state
• /sys/config/ui
• /sys/control-group
• /sys/decode-token
• /sys/experiments
• /sys/generate-recovery-token
• /sys/generate-root
• /sys/health
• /sys/host-info
• /sys/in-flight-req
• /sys/init
• /sys/internal/counters
• /sys/internal/specs/openapi
• /sys/internal/ui/feature-flags
• /sys/internal/ui/mounts
• /sys/internal/ui/namespaces
• /sys/internal/ui/resultant-acl
• /sys/key-status
• /sys/ha-status
• /sys/leader
• /sys/leases
• /sys/license/status
• /sys/locked-users
• /sys/loggers
• /sys/managed-keys
• /sys/metrics
• /sys/monitor
• /sys/mounts
• /sys/namespaces
• /sys/plugins/reload/backend
• /sys/plugins/catalog
• /sys/plugins/runtimes/catalog
• /sys/policy
• /sys/policies
• /sys/policies/password
• /sys/pprof
• /sys/quotas/config
• /sys/quotas/rate-limit
• /sys/quotas/lease-count
• /sys/raw
• /sys/rekey
• /sys/rekey-recovery-key
• /sys/remount
• /sys/rotate
• /sys/rotate/config
• /sys/seal
• /sys/seal-status
• /sys/seal-backend-status
• /sys/sealwrap/rewrap
• /sys/step-down
• /sys/sync
• /sys/tools
• /sys/unseal
• /sys/version-history
• /sys/wrapping/lookup
• /sys/wrapping/rewrap
• /sys/wrapping/unwrap
• /sys/wrapping/wrap

/sys/internal/inspect

• /sys/internal/inspect/router

/sys/mfa

• /sys/mfa/method/duo
• /sys/mfa/method/okta
• /sys/mfa/method/pingid
• /sys/mfa/method/totp
• /sys/mfa/validate

/sys/replication

• /sys/replication/performance
• /sys/replication/dr

/sys/storage

• /sys/storage/raft
• /sys/storage/raft/snapshot-auto