Storing Assets in HashiCorp Vault (read only)

Note: Before performing the following procedure, make sure you have configured your HashiCorp Vault (read-only) integration.

When storing an asset of type Credential or Secret in a read-only credential store, you must create the secret in Vault and make sure you meet the following requirements:

• The path of the secret must contain the data path configured for the credential store, concatenated with the External Name configured for that value (if using values per robot) or the asset name otherwise. For example, if the data path is applications/orchestrator/assets, and the External Name is SAPCredentials, then the secret's path must be applications/orchestrator/assets/SAPCredentials.
• The secret must include the following keys:

  • For Credential-type assets:
    • a key named Username, whose value contains the username of the credentials.
    • a key named Password, whose value contains the password of the credentials.
  • For Secret-type assets:
    • a key named Username, whose value contains the asset name.
    • a key named Password, whose value contains the value of the secret.

Important: The Username and Password fields are case sensitive.