Nick Vigilante
dc21767143
Spell out each abbreviation where it first appears on a page, in the form "Expanded Form (ABBR)", so every page in docs/ passes the Coder.AbbreviationFirstUse rule that the next commit enables. Where the first use is a UI label in bold, the label stays as the UI shows it and the expansion goes elsewhere in the same paragraph or list item. Reversed forms such as "PKCE (Proof Key for Code Exchange)" are flipped to the expanded-first form. A few sentences needed a small rewording to take the expansion: glossary entries that said "abbreviated CVA" and "abbreviated PAT", hyphenated compounds such as "EKS-specific", and a parenthetical about SSDs that would otherwise nest parentheses. Other changes on touched lines: "IDES" becomes "IDEs", "DERP MAP" becomes "DERP map", and an em dash in a table row that the table formatter re-padded becomes a comma, because the em-dash check reads changed lines. Assisted-by: AI
1.5 KiB
title
| title |
|---|
| Integrate HashiCorp Vault with Coder |
This guide describes the process of integrating HashiCorp Vault into Coder workspaces.
Coder makes it easy to integrate HashiCorp Vault with your workspaces by providing official Terraform modules to integrate Vault with Coder. This guide will show you how to use these modules to integrate HashiCorp Vault with Coder.
The vault-github module
The vault-github module is a Terraform module that allows you to authenticate with Vault using a GitHub token.
This module uses the existing GitHub external authentication to get the token and authenticate with Vault.
To use this module, add the following code to your Terraform configuration.
module "vault" {
source = "registry.coder.com/modules/vault-github/coder"
version = "1.0.7"
agent_id = coder_agent.example.id
vault_addr = "https://vault.example.com"
coder_github_auth_id = "my-github-auth-id"
}
This module installs and authenticates the vault CLI in your Coder workspace.
Users then can use the vault CLI to interact with Vault; for example, to fetch a secret stored in the key-value (KV) backend.
vault kv get -namespace=YOUR_NAMESPACE -mount=MOUNT_NAME SECRET_NAME