Adding Vault LDAP users to Deploy secret store

You can create a secret store in Deploy and add Vault LDAP users to the secret store to authenticate users with Vault-defined LDAP.

Before you begin

  • You must have installed the Vault server and have the server address.
  • You must have the following permissions:
    • Create, view, and edit secret store permissions to create a secret store.
    • Create, view, and edit Vault Ldap User permissions to manage LDAP users of a secret store.

About this task

You can create secret stores and manage them from the Secret Stores tab.

Procedure

  1. Click Create Vault Secret Store.
  2. Create a secret store in the Manage Vault Secret Store window and provide the folowing details:
    Parameter Description
    Name Identifies the Vault secret store name.
    Note: Characters other than a-z, A-Z, 0-9, and - are not allowed.
    Description Conveys more information about the Vault.
    Teams Allow access of a Vault secret store to specific teams.
    URL Indicates the Vault server address.
  3. Save your changes.
    The secret store lists on the Secret Stores page.
  4. Add LDAP users to the secret store.
    1. Click the secret store to which you want to add the LDAP users.
    2. Click Ldap Users.
    3. Click Create Vault Ldap User.

      The Manage Vault Ldap User window is displayed.

    4. In the Manage Vault Ldap User window, enter the following LDAP user details:
      Parameter Description
      Name Identifies the Vault LDAP user name.
      Password Specifies the password of the LDAP user.
      Teams Allows access of the LDAP user to specific teams.
      Note: The LDAP user name field does not allow characters other than a-z, A-Z, 0-9, and -.
    5. Save your changes.

      The LDAP user is added to the Vault LDAP page.

Results

You have managed creating a secret store and added LDAP users to the secret store.

What to do next

You can run a process with a step by using the secret store property as follows:
${p:secret:vault:<secretStoreName>:<vaultLDAPusername>:<vaultSecretPath>:<vault-key>}
Note: When the process runs, on reaching the step where the property is defined, the process validates and authenticates the credentials from the Vault.