Usage

Install the Ubuntu 22.04 Base Box.

Launch the environment with libvirt (qemu-kvm):

vagrant up --provider=libvirt --no-destroy-on-error

Add the following entry to your hosts file:

10.0.0.20 vault.example.com

Browse to the UI and login with the vault root token (get it from the shared/vault-root-token.txt file).

Test the prometheus telemetry endpoint.

List this repository dependencies (and which have newer versions):

export GITHUB_COM_TOKEN='YOUR_GITHUB_PERSONAL_TOKEN'
./renovate.sh

TLS

Verify that a secure connection with vault can be established:

vagrant ssh
echo -n | openssl s_client -CAfile /etc/ssl/certs/ca-certificates.crt -servername vault.example.com -connect vault.example.com:8200

And make sure the result has no errors, e.g.:

depth=1 CN = Example CA
verify return:1
depth=0 CN = vault.example.com
verify return:1
...
Verification: OK

Reference

• Why We Need Dynamic Secrets (MAR 01 2018)
• Authenticating Applications with HashiCorp Vault AppRole (MAR 13 2018)