How does Octopus deploy interact with hashicorp vault to get secrets and certificates?

Question

1. how to create secrets and certs in hashivault?
2. How to pull those secrets into my octopus deploy?

Answer 1

Looking at the documentation, you can't write secrets in Vault from your pipeline. A part of your pipeline, maybe a Terraform or Ansible, will generate secrets and store them in Vault, for another part of the pipeline to retrieve them later.

Once you have secrets to retrieve, you will need to

1. Authenticate to Vault
2. Pull the secrets

I suggest that you start write and reading secrets and certificate from the command line first, to quickly get a sense of how Vault works. Something like:

vault kv put secret/octopus/dev/pipeline-1 my-secret=hello123
vault kv get secret/octopus/dev/pipeline-1