Skip to main content Skip to complementary content

Setting Vault parameters for HashiCorp

Select a group for each type of operations and configure the connection fields accordingly.

Before you begin

You have selected HashiCorp in the Vault provider field.

Procedure

  1. Click Set Vault parameters in Vault configuration.
  2. Select a group for each operation type.
    Group Description
    DISABLED Your data remains encrypted.
    READ_ONLY Your data is managed by the Vault administrator. Talend Administration Center retrieves the data from Vault and uses it.

    For example, there is the Vault database password named db_pass. To use it in Talend Administration Center, you need to add VAULT_db_pass in the Password field in Database parameters or directly in the configuration.properties file. Talend Administration Center will understand that the password is in Vault and will retrieve it using the Vault REST API.

    WRITE Your data is completely managed by Talend Administration Center. Talend Administration Center will create, update, read, or delete your data.

    When the migration to Vault completes successfully, all encrypted data related to the WRITE group is decrypted and transferred to Vault. IDs from Vault are stored in Talend Administration Center.

    For example, if you select WRITE for the DB password operations, after inserting a password in Database parameters, the values will be stored in Vault by Talend Administration Center and the password ID from Vault will be stored in the configuration.properties file.

  3. Fill in the following connection fields depending on the groups selected previously:
    Vault URL and Token: you need to provide the Vault URL and token when you select the READ_ONLY or WRITE groups for an operation type.

What to do next

If you have selected WRITE for at least one of the password operation types during this procedure, you need to launch the migration of your data to Vault.
Information noteNote: There is no migration when you have selected only READ_ONLY and DISABLED.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!