Pulumi Vault Provider
Manage HashiCorp Vault with Infrastructure as Code.
Overview
The Pulumi Vault provider enables the management of a HashiCorp Vault instance using infrastructure as code. It allows for the configuration of secrets engines, authentication methods, policies, and other Vault resources programmatically. This is crucial for automating the setup and maintenance of a secure and compliant secrets management platform.
✨ Key Features
- Manage ACL Policies and Tokens
- Configure Auth Methods (e.g., AppRole, AWS, Kubernetes)
- Enable and configure Secrets Engines (e.g., KV, Database, PKI)
- Manage Mounts and Namespaces
- Read and write secrets
🎯 Key Differentiators
- Use of general-purpose programming languages for dynamic policy generation
- Unified workflow for managing both the Vault configuration and the infrastructure that uses it
Unique Value: Applies the principles of infrastructure as code to secrets management, enabling automated, version-controlled, and auditable configuration of HashiCorp Vault.
🎯 Use Cases (4)
✅ Best For
- A Pulumi program that configures a Vault instance with an AWS authentication backend, a Key-Value secrets engine, and policies that grant specific applications access to secrets.
- Dynamically creating Vault policies based on a list of applications defined in code.
💡 Check With Vendor
Verify these considerations match your specific requirements:
- Deploying the Vault server infrastructure itself (which would be done with a cloud provider like AWS or GCP).
🏆 Alternatives
Offers a more robust and scalable solution for managing Vault than manual configuration, and provides the flexibility of real programming languages compared to DSL-based tools.
💻 Platforms
🔌 Integrations
💰 Pricing
Free tier: The provider is open-source and free. Costs are associated with running Vault (e.g., Vault Enterprise license, server costs).
🔄 Similar Tools in Pulumi Cloud
Kubernetes
Pulumi's Kubernetes provider allows you to manage Kubernetes resources using languages like TypeScri...
Datadog
The Pulumi Datadog provider allows you to provision and manage Datadog resources like monitors, dash...
Cloudflare
The Pulumi Cloudflare provider lets you manage DNS records, firewall rules, workers, and other Cloud...
DigitalOcean
The Pulumi DigitalOcean provider lets you manage Droplets, Kubernetes clusters, databases, and other...
Auth0
The Pulumi Auth0 provider allows you to configure your Auth0 tenant, including applications, APIs, u...
Okta
The Pulumi Okta provider allows you to manage Okta resources like applications, users, groups, and p...