mirror of
https://github.com/coder/coder.git
synced 2026-06-03 13:08:25 +00:00
Edward Angert
5c16079aff
closes https://github.com/coder/coder/issues/18307 relates to https://github.com/coder/coder/pull/18318 preview: - [refresh-tokens](https://coder.com/docs/@18307-refresh-tokens/admin/users/oidc-auth/refresh-tokens) - [configuring-okta](https://coder.com/docs/@18307-refresh-tokens/tutorials/configuring-okta) ~(not sure why @Emyrk 's photo is so huge there though)~ ✔️ - [x] removed from [idp-sync](https://coder.com/docs/@18307-refresh-tokens/admin/users/idp-sync) to do: - move keycloak - add ping federate and azure - edit text (possibly placeholders for now - I want to see how it all relates and edit it again. right now, there's a note about the same thing in every section in way that's not super helpful/necessary) - ~convert some paragraphs to OL~ calling this out of scope for now --------- Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com>
44 lines
1.5 KiB
Markdown
44 lines
1.5 KiB
Markdown
# Integrating HashiCorp Vault with Coder
|
|
|
|
<div>
|
|
<a href="https://github.com/matifali" style="text-decoration: none; color: inherit;">
|
|
<span style="vertical-align:middle;">Muhammad Atif Ali</span>
|
|
</a>
|
|
</div>
|
|
August 05, 2024
|
|
|
|
---
|
|
|
|
This guide describes the process of integrating [HashiCorp Vault](https://www.vaultproject.io/) into Coder workspaces.
|
|
|
|
Coder makes it easy to integrate HashiCorp Vault with your workspaces by
|
|
providing official Terraform modules to integrate Vault with Coder. This guide
|
|
will show you how to use these modules to integrate HashiCorp Vault with Coder.
|
|
|
|
## The `vault-github` module
|
|
|
|
The [`vault-github`](https://registry.coder.com/modules/vault-github) module is a Terraform module that allows you to
|
|
authenticate with Vault using a GitHub token. This module uses the existing
|
|
GitHub [external authentication](../external-auth/index.md) to get the token and authenticate with Vault.
|
|
|
|
To use this module, add the following code to your Terraform configuration.
|
|
|
|
```tf
|
|
module "vault" {
|
|
source = "registry.coder.com/modules/vault-github/coder"
|
|
version = "1.0.7"
|
|
agent_id = coder_agent.example.id
|
|
vault_addr = "https://vault.example.com"
|
|
coder_github_auth_id = "my-github-auth-id"
|
|
}
|
|
```
|
|
|
|
This module installs and authenticates the `vault` CLI in your Coder workspace.
|
|
|
|
Users then can use the `vault` CLI to interact with Vault; for example, to fetch
|
|
a secret stored in the KV backend.
|
|
|
|
```shell
|
|
vault kv get -namespace=YOUR_NAMESPACE -mount=MOUNT_NAME SECRET_NAME
|
|
```
|