51 Repositories
Go vault Libraries
VaultOperator provides a CRD to interact securely and indirectly with secrets stored in Hashicorp Vault.
vault-operator The vault-operator provides several CRDs to interact securely and indirectly with secrets. Details Currently only stage 1 is implemente
Some useful tools to help manage attachments in my local markdown projects.
Some useful tools to help manage attachments in my local markdown projects.
Vault Authentication Azure Auth Method Demo Application
This application demonstrates how applications hosted on Azure VMs can use managed identity to authenticate with HashiCorp Vault using the Azure Auth Method.
Aws-console-plugin - The current HashiCorp Vault AWS Secret Engine currently supports the creation of short lived API keys using the IAM User
aws-console-plugin Background The current HashiCorp Vault AWS Secret Engine curr
Certificator - The tool that requests certificates from ACME supporting CA, solves DNS challenges, and stores certificates in Vault
certificator The tool that requests certificates from ACME supporting CA, solves
Vault mock - Mock of Hashicorp Vault used for unit testing
vault_mock Mock of Hashicorp Vault used for unit testing Notice This is a person
A plugin for Hashicorp Vault to create ephemeral users and API tokens for Jenkins CI
vault-plugin-secrets-jenkins This is a backend plugin to be used with Hashicorp Vault. This plugin generates ephemeral Jenkins Users and API tokens. v
Create @tailscale authentication tokens using vault
Vault Secrets Plugin - Tailscale Vault secrets plugins to simplying creation, ma
A simple, secure self-destructing message service, using HashiCorp Vault product as a backend
sup3rS3cretMes5age! A simple, secure self-destructing message service, using Has
Example of a cinema microservice written in Golang deployed on Hashicorp Stack tools
Cinemas Microservice in Go (Project) (You are in Step-1) This project consist of the following components: . ├── base_docker_image ├── deploy │ ├──
create @auth0 management api tokens
Vault Secrets Plugin - Auth0 Vault secrets plugins to simplying creation, management, and revocation of auth0 management API tokens. Usage Setup Endpo
Secure SDK/vault for personal records/PII built to comply with GDPR
Databunker Databunker is a network-based, self-hosted, GDPR compliant, secure vault for personal data or PII: https://databunker.org/ Project demo is
Go SDK for ID Analyzer Core API, DocuPass and Vault
ID Analyzer Go SDK This is a Go SDK for ID Analyzer Identity Verification APIs, though all the APIs can be called with without the SDK using simple HT
Integrates Spiffe and Vault to have secretless authentication
SPIFFE Vault Integrates SPIFFE SVID authentication with Hashicorp Vault to retrieve a VAULT_TOKEN. Example usecases Read secrets from Hashicorp Vault
Simple command line tool helper to integrate with hashicorp vault & github api
Overview CI/CD Toolkit is small command line tool helper to integrate with vault secret kv management & github api We can use simple command to genera
Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
Consul Website: https://www.consul.io Tutorials: HashiCorp Learn Forum: Discuss Consul is a distributed, highly available, and data center aware solut
Vaku is a CLI and API for running path- and folder-based operations on the Vault Key/Value secrets engine.
Vaku Vaku is a CLI and API for running path- and folder-based operations on the Vault Key/Value secrets engine. Vaku extends the existing Vault CLI an
An ATNA (Audit Trail and Node Authentication) Cloud Backup Utility
ATNA Vault ATNA Vault allows you to maintain a secure long-term archive for all your IHE audit messages. IHE vendors who can provide "filter forward"
WIP Go Thing to download HCP Vault Logs
Example Go Script to pull HCP Vault Audit Logs WARNING: This makes use of unstable preview APIs which could change at any time! USE AT YOUR OWN PERIL
recursively list secrets from Vaults KV2 engine
vkv recursively list secrets from Vaults KV2 engine Installation Find the corresponding binaries, .rpm and .deb packages in the release section. Authe
A tool for secrets management, encryption as a service, and privileged access management
Deploy HCP Vault & AWS Transit Gateways via Terraform https://medium.com/hashicorp-engineering/deploying-hcp-vault-using-the-hcp-terraform-provider-5e
Small helper to bridge between Vault and AWS Credential Process.
vault-aws-credential-helper The Vault AWS Credential Helper is a component that can be injected into a task environment and be used as a credential he
vault-plugin-auth-usertotp is an auth method plugin for HashiCorp Vault.
vault-plugin-auth-usertotp is an auth method plugin for HashiCorp Vault. Create user accounts, add TOTP tokens (user supplied pin + totp), and have peace of mind using 2FA.
A system written in Golang to help ops team to automate the process of mapping Vault groups to LDAP Groups.
A system written in Golang to help ops team to automate the process of mapping Vault groups to LDAP Groups. This utility automatically adds LDAP Groups' members to the corresponding Vault Groups.
docker plugin use vault as secret provider.
docker plugin vault docker secret plugin for vault provider how to build docker plugin rm -fr plugin/rootfs/.dockerenv plugin/rootfs/* docker build -
Copy your HashiCorp Vault secrets to a file
Vault Backup ⚠️ Check the oficial way to backup your HashiCorp Vault. Create a backup file of all HashiCorp Vault kv2 secrets. ./vault-backup -help
Secret management toolchain
Harp TL;DR. Why harp? Use cases How does it work? Like a Data pipeline but for secret Immutable transformation What can I do? FAQ License Homebrew ins
Sidecar container for injecting secrets into configuration files from Hashicorp Vault
talebearer noun A person who spreads scandal or tells secrets; gossip Note This code is not being actively developed, and has not seen substantial cha
Terraform credentials helper for Vault
Terraform Credentials from HashiCorp Vault terraform-credentials-vault is a Terraform "credentials helper" plugin that allows providing credentials fo
An operator to support Haschicorp Vault configuration workflows from within Kubernetes
Vault Config Operator This operator helps set up Vault Configurations. The main intent is to do so such that subsequently pods can consume the secrets
Support converting Vault Secrets to diffrent formats.
Vault Converter Support converting Vault Secrets to different formats. vault-converter is a tool designed to synchronize variables from local to Vault
An operator to support Haschicorp Vault configuration workflows from within Kubernetes
Vault Config Operator This operator helps set up Vault Configurations. The main intent is to do so such that subsequently pods can consume the secrets
This plugin enhances Hashicorp Vault Service with cryptographic operations to create, import and sign using different type of keypairs and Ethereum wallets, including signing operation for public ethereum transaction, EEA and Quorum
Quorum Hashicorp Vault plugin The Quorum plugin enhances Hashicorp Vault Service with cryptographic operations under Vault engine, such as: Create and
A plugin that turn hashicorp vault into blockchain wallet.
dq-vault - Hashicorp vault BTC/ETH plugin This vault plugin stores a user's mnemonic inside vault in an encrypted manner. The plugin uses this stored
vault-plugin-auth-usertotp is an auth method plugin for HashiCorp Vault
vault-plugin-auth-usertotp is an auth method plugin for HashiCorp Vault. Create user accounts, add TOTP tokens (user supplied pin + totp), and have peace of mind using 2FA.
sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP
sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP. (demo)
Simplify Kubernetes Secrets Management with Dockhand Secrets Operator
dockhand-secrets-operator Secrets management with GitOps can be challenging in Kubernetes environments. Often engineers resort to manual secret creati
A lightweight Vault client module written in Go, with no dependencies, that is intuitive and user-friendly
libvault A lightweight Hashicorp Vault client written in Go, with no dependencies. It aims to provide an intuitive, simple API that is easy to use. Ju
A k8s vault webhook is a Kubernetes webhook that can inject secrets into Kubernetes resources by connecting to multiple secret managers
k8s-vault-webhook is a Kubernetes admission webhook which listen for the events related to Kubernetes resources for injecting secret directly from sec
A flexible commandline tool for template rendering. Supports lots of local and remote datasources.
Read the docs at docs.gomplate.ca, chat with developers and community in the #gomplate channel on Gophers Slack gomplate is a template renderer which
Teller - the open-source universal secret manager for developers
A secrets management tool for developers built in Go - never leave your command line for secrets.
Consul Load-Balancing made simple
Notes From release 1.5.15 onward, fabio changes the default GOGC from 800 back to the golang default of 100. Apparently this made some sense back in t
A tool for secrets management, encryption as a service, and privileged access management
Vault Please note: We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please respo
Consul Load-Balancing made simple
Notes From release 1.5.15 onward, fabio changes the default GOGC from 800 back to the golang default of 100.
Kubernetes Operator for a Cloud-Native OpenVPN Deployment.
Meerkat is a Kubernetes Operator that facilitates the deployment of OpenVPN in a Kubernetes cluster. By leveraging Hashicorp Vault, Meerkat securely manages the underlying PKI.
vault-init is a small utility for automating the initialization and unsealing of HashiCorp Vault.
vault-init vault-init is a small utility for automating the initialization and unsealing of HashiCorp Vault. It draws inspiration from kelseyhightower
Consul Load-Balancing made simple
Notes From release 1.5.15 onward, fabio changes the default GOGC from 800 back to the golang default of 100. Apparently this made some sense back in t
🌰 encrypt/decrypt using ssh keys
ssh-vault 🌰 encrypt/decrypt using ssh private keys Documentation https://ssh-vault.com Usage $ ssh-vault -h Example: $ echo "secret" | ssh-vault -u
Secure storage for personal records built to comply with GDPR
Databunker Databunker is a Personally Identifiable Information (PII) Data Storage Service built to Comply with GDPR and CCPA Privacy Requirements. Pro
🌰 encrypt/decrypt using ssh keys
ssh-vault 🌰 encrypt/decrypt using ssh private keys Documentation https://ssh-vault.com Usage $ ssh-vault -h Example: $ echo "secret" | ssh-vault -u
Composable, observable and performant config handling for Go for the distributed processing era
Konfig Composable, observable and performant config handling for Go. Written for larger distributed systems where you may have plenty of configuration