Secret store property usage
At times, you may need to retrieve values from Vault and add them to a plug-in step.
For example, start tomcat plug-in step from the Apache Tomcat plug-in.
After you create a HCL DevOps Deploy (Deploy) secret store
and add users to it, you can add an input property for Vault at any of the levels where
secure passwords are allowed. For example, at application level or at resource level. You
can use the Vault property in an automation or source configuration plug-in step.
You can retrieve user credentials from the Vault by using the following property in a plug-in step:
${p:secret:vault:<secretStoreName>:<vaultUsername>:<vaultSecretPath>:<vault-key>}
- <secretStoreName> is the name of the Deploy secret store.
- <vaultUsername> is the Vault AppRole name or LDAP user name whose credentials are required to run the plug-in step.
- <vaultSecretPath> is the path to the Vault secret.
- <vault-key> is the Vault key or property.
When the process runs, on reaching the step where the property is defined, the process validates and authenticates the credentials from the Vault.