Creating a Node.js App that Records and Retrieves Secrets from Vault
summary
A minimal Node.js app demonstrates authenticating to HashiCorp Vault via AppRole to obtain a token, then writing and reading KV v2 secrets over HTTPS to a Vault 1.6.2 Docker instance; the demo is a 65-line demo app that uses an npm helper library (listed on the repo) and Axios under the hood, requires an unsealed Vault, uses AppRole role_id + secret_id where secret_id is ephemeral, and the helper package sees about 2,600 weekly downloads (peaked ~7,000), and the demo works end-to-end.
AI-written summary · about
chapters (7)
- 0:00Introduction and motivation
- 3:16Why use HashiCorp Vault
- 7:06Helper library overview
- 11:03Demo environment setup
- 13:16Live application walkthrough
- 21:07Code implementation steps
- 26:11Key takeaways and conclusion
related talks
24mSecrets as Code
23mUsing Hashicorp Vault in Kubernetes Clusters
29mIntro to secrets management using Vault
40mA Better Way To Manage Secrets
24mDeveloper-First Application Security and DevSecOps
41mChanging Applications for Changing Secrets
38mKeeping Secrets - A Practical Approach to Managing Credentials
31mModern Security with Microservices and the Cloud