Integrate with HashiCorp to secure sensitive data

You can integrate HashiCorp Vault with Ansible Automation Platform to manage and retrieve sensitive data.

Configure Ansible Automation Platform to communicate with HashiCorp vault
Copy link

In enterprise environments, managing secrets externally is vital. A recommended HashiCorp Vault method uses AppRoles. To use these secrets, configure a new Ansible Automation Platform credential using the HashiCorp Vault Secret Lookup type.

About this task
Copy link

Enter relevant information such as an identifiable credential name, organization, and the URL of the vault server, for example, https://vault.domain.com:8200.

Populate the necessary fields with your information such as Token, AppRole role_id, and AppRole secret_id, then select v2 for the API version.

To test the credential to test for functionally and operation, use the following procedure:

Procedure
Copy link

  1. Before clicking on Create Credential, click Test.
  2. In the pop-up box, enter the Path to Secret and the Key Name.
    Note

    The Path to Secret will be prefixed by kv if storing a key-value pair, for example, kv/key_name.
  3. Click Run.
  4. When the test is successful, click Create Credential.
  5. When complete, Ansible Automation Platform is properly configured to use HashiCorp Vault as an external secret source.

Use HashiCorp Vault credentials within Ansible Automation Platform
Copy link

To use HashiCorp vault credentials within Ansible Automation Platform, create a new credential with the type Machine Credential. Enter relevant information such as an identifiable credential name and an organization.

About this task
Copy link

To configure the use of HashiCorp Vault credentials, use the following procedure:

Procedure
Copy link

  1. To configure the Username, click the Key icon.
  2. Select the HashiCorp Vault credentials that were created in step 1.
  3. Populate Path to Secret and the Key Name.
  4. Optionally, click Test. Otherwise, click Finish.

Configure the machine credential’s SSH private key
Copy link

Link your machine credential's SSH private key to HashiCorp Vault. Retrieving this key from an external secret management system helps ensure that sensitive authentication details are securely injected into your automation workflows.

Procedure
Copy link

  1. To configure the Username, click the Key icon.
  2. Select the HashiCorp Vault credentials that you created.
  3. Populate the Path to Secret and the Key Name.
  4. Select the name of the private key as the Key Name.
  5. Optionally, click Test. Otherwise, click Finish.