5c16079aff
closes https://github.com/coder/coder/issues/18307 relates to https://github.com/coder/coder/pull/18318 preview: - [refresh-tokens](https://coder.com/docs/@18307-refresh-tokens/admin/users/oidc-auth/refresh-tokens) - [configuring-okta](https://coder.com/docs/@18307-refresh-tokens/tutorials/configuring-okta) ~(not sure why @Emyrk 's photo is so huge there though)~ ✔️ - [x] removed from [idp-sync](https://coder.com/docs/@18307-refresh-tokens/admin/users/idp-sync) to do: - move keycloak - add ping federate and azure - edit text (possibly placeholders for now - I want to see how it all relates and edit it again. right now, there's a note about the same thing in every section in way that's not super helpful/necessary) - ~convert some paragraphs to OL~ calling this out of scope for now --------- Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com>
1.5 KiB
Integrating HashiCorp Vault with Coder
August 05, 2024This guide describes the process of integrating HashiCorp Vault into Coder workspaces.
Coder makes it easy to integrate HashiCorp Vault with your workspaces by providing official Terraform modules to integrate Vault with Coder. This guide will show you how to use these modules to integrate HashiCorp Vault with Coder.
The vault-github module
The vault-github module is a Terraform module that allows you to
authenticate with Vault using a GitHub token. This module uses the existing
GitHub external authentication to get the token and authenticate with Vault.
To use this module, add the following code to your Terraform configuration.
module "vault" {
source = "registry.coder.com/modules/vault-github/coder"
version = "1.0.7"
agent_id = coder_agent.example.id
vault_addr = "https://vault.example.com"
coder_github_auth_id = "my-github-auth-id"
}
This module installs and authenticates the vault CLI in your Coder workspace.
Users then can use the vault CLI to interact with Vault; for example, to fetch
a secret stored in the KV backend.
vault kv get -namespace=YOUR_NAMESPACE -mount=MOUNT_NAME SECRET_NAME