Cloud integration using HashiCorp Vault - As an administrator, you can configure the HashiCorp Cloud integration in the Control Room .

Automation 360

As an administrator, you can configure the HashiCorp Cloud integration in the Control Room.

The following image shows HashiCorp Vault Cloud integration in the Control Room:HashiCorp cloud deployment

Before you begin

  • Ensure that you understand the key vault naming convention requirements before you integrate HashiCorp Vault. See External key vault naming conventions.
  • You must have administrator role to configure these settings.
  • Ensure that you have configured the AppRole authentication and have the RoleID, SecretID, role name, and namespace values available. For more information, see HashiCorp Vault integration.
  • Gather the specific HashiCorp Vault information required to configure the external key vault connector using the Automation 360 Control Room.
    Item Description
    Vault URL The HashiCorp Vault of the resource group (for example: https://<hostname1:port_num>).
    Role ID Ensure that the role with the given Role ID has a minimum of read permission to the secrets engine path and to all the secrets that are created in the secrets engine.
    Role Name Keep the Role Name ready.
    Secret ID Keep the Secret ID ready.
    Secrets Engine Path Ensure that you enter the complete path of the secrets engine. Choose from:
    • You can either use the default secrets engine path v1/secret/data where the Control Room automatically appends the Secrets engine path to the vault URL you enter (for example: https://<hostname1:port_num>/v1/secret/data).
    • Or you can configure your own secrets engine path using the custom format v1/<custom-kv-engine>/data.
    Namespace This is an optional field.
    Server Certificate - PEM format Obtain the SSL certificate available in PEM format. This certificate is optional and is needed only when the installer host does not trust the HashiCorp Vault server certificate.
Procedure
Note: In Automation 360 v.41 and later, external vault configuration is available through only one of the following paths, depending on the features enabled for your environment:
  • If the Manage > External Vault option is visible, configure external vault using this flow. This flow supports configuring external vault connection in environments that use one or more external vaults.
  • If not, configure external vault using Administration > Settings > External key vault.
  1. Log in to the Automation 360 Control Room with the required permissions.
  2. Do one of the following based on the navigation path visible to you:
    • Navigate to Administration > Settings > External key vault and click the Edit icon.

      Administration path

    • Navigate to Manage > External Vault > Vaults and click the Add Vault, Add or + icon.

      Manage path

  3. Select the HashiCorp Key Vault option.
  4. Enter the specific HashiCorp Vault information described in the table given in the Prerequisite section.
  5. Click Save changes or Add Vault.

What to do next

You can configure HashiCorp Vault for the following features:

You can verify or troubleshoot using the following information: