Skip to content

Secret provider setup example

Note

This feature is available in Lite, Enterprise, and Ultimate editions only.

This guide shows a basic setup for a secret provider using the web UI. The example uses HashiCorp Vault, but the same approach applies to other providers.

Enable KV secrets engine

  1. Open the Vault UI.
  2. Go to Secrets Engines.
  3. Click Enable new engine +.

  4. Select KV, set Path to secret, and click Enable Engine.

Tip

If KV is already enabled, reuse the existing mount path.

Create a secret

  1. Go to Secrets Engines -> secret.
  2. Click Create secret +.
  3. Enter name.

  4. Add key-value pairs.

  5. Click Save.

Create a connection

  1. Start creating a connection.

  2. In the Create Connection wizard, go to the Main tab, choose secret provider configuration and enter the secret name in the Secret parameters field.

    Note

    Secret name format depends on the provider. See Secret name format.

  3. If required fields are missing in the secret, enter them manually.

  4. Click Test Connection to verify your settings.
  5. Click Finish to save the connection.