Skip to content
Slipwaydocs

HashiCorp Vault

KV, transit and JWT auth. Jobs log in to Vault with their OIDC token.

At a glance

Section titled “At a glance”
Category Secret managers
Authentication Vault JWT/OIDC auth method (no static token)
Provider id vault

What it does

Section titled “What it does”
  • External secret references: vault://...
  • Transit as the BYOK keyring
  • Per-job short-lived Vault tokens

Set up

Section titled “Set up”
  1. Grant the Slipway job identity (or the integration credential) read access to the secret path.
  2. In Settings, Integrations, add the secret manager.
  3. Create a Slipway secret of kind external_ref such as vault://kv/data/app#password.
  4. Reference it as ${{ secrets.NAME }} in env or with.

Configuration

Section titled “Configuration”

Illustrative configuration. Non-secret settings are stored as integration config; credentials are stored as encrypted Slipway secrets and referenced by name.

provider: vault
config:
  address: https://vault.example.com:8200
  auth: jwt
  role: slipway-deploy
  mount: jwt

Notes

Section titled “Notes”

See OIDC with Vault.

Section titled “Related”