Configuring HashiCorp Vault for On-Prem Agent

On-Prem Agent v2.19 and later supports using HashiCorp Vault (opens new window) as a secrets engine for cloud profiles.

To set up HashiCorp Vault for OPA, follow either of the guides below. However, when you get to Step 3, select an on-prem group from the Connection type picklist instead of Cloud. The rest of the setup is identical.

• Setting up HashiCorp Vault secrets engines for workspaces
• Setting up HashiCorp Vault secrets engines for projects

When you configure HashiCorp Vault for cloud profiles, you do not need to manually edit the config.yml file.

---

FURTHER READING

• Using HashiCorp Vault secrets to authenticate to connections
• HashiCorp Vault policies