HashiCorp Vault Asp.Net Core 2.0 Netstandard implementation
The goal of this project is to provide a way to read encrypted values from HashiCorp Vault thru environment variables inside the Kubernetes pods.
- ConfigMap - store non-secure information i.e HashiCorp Vault url with port number and keys for the secure data to be retrieved.
- Secrets - store HashiCorp Vault credentials.
Nuget Package
Install-Package NetCore.HashiCorp.Vault
Docker
There are two example of using this library in the Docker container.
- ConsoleApp
- WebApp
In order for the example to run the following code is added to the Configurations for both projects:
.ConfigureAppConfiguration((context, configBuilder) => {
configBuilder.AddEnvironmentVariables();
configBuilder.AddJsonFile("appsettings.json", optional: true);
configBuilder.AddCommandLine(args);
var configuration = configBuilder.Build();
#region DEBUG: Seed the Vault before reading into Configurations
// bind vault options
var options = new VaultOptions();
configuration.Bind("VaultOptions", options);
// bind seeder
var seedData = new List<VaultSeeder>();
configuration.Bind("VaultSeeder", seedData);
var logger = new LoggerFactory()
.AddConsole()
.AddDebug()
.CreateLogger<VaultWriteService>();
// seed
new VaultWriteService(
logger,
options,
seedData
).SeedVault();
#endregion
// retrieve encrypted values and make available to the application
configuration = configBuilder.AddHashiCorpVault(configuration).Build();
// set configuration
context.Configuration = configuration;
})
Tools
- Visual Studio.NET 2017
- Visual Studio Code
Resources
Configurations
- Json format
{
"VaultOptions": {
"Server": "http://localhost:8300",
// "RoleId": "",
// "SecretId": "",
"TokenId": "root_dev_token",
"Prefix": "secret",
"Secrets": [
"connectionString",
"option1"
]
}
}
- YAML format
VaultOptions:
Server: http://localhost:8300
TokenId: root_dev_token
Prefix: secret
Secrets:
- connectionString
- option1
Docker Communication
In order to troubleshoot connection between the Docker container, log into one of the containers and install ping utility:
apt-get update && apt-get install -y iputils-ping