Skip to main content

Vault Gate

API interface for Openbao vault.

There are two type of secrets. The one that should be generated randomly(seed, password, token, etc.) and the one that should be inserted(some integrated service gives us an api key for example).

You should define directories with type(common, protected). common type directories are the ones that allowed to insert a secret value via request. protected type directories are write protected for secret values from client. It only allows the secret values to be generated in runtime.

Updates on existing values are prevented completely. Defined set of instructions only allows append-type operations. If you try to overwrite any secret this service won't allow the operation.

Pre-defined secret generation types for protected directories​

  • AES-256 key
  • JWT secret
  • JWT id
  • JWT token
  • Password