Files
terraform-provider-threshold/docs/resources/credential_store_vault.md
T
dependabot[bot]andJohan Brandhorst-Satzkorn 85f9a3d081 build(deps): bump the go group across 1 directory with 2 updates (#714)
* build(deps): bump the go group across 1 directory with 2 updates

Bumps the go group with 2 updates in the / directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary) and [github.com/hashicorp/terraform-plugin-docs](https://github.com/hashicorp/terraform-plugin-docs).

Updates `github.com/hashicorp/boundary/sdk` from 0.0.52 to 0.0.53
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/boundary/compare/api/v0.0.52...api/v0.0.53)

Updates `github.com/hashicorp/terraform-plugin-docs` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-docs/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-docs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/terraform-plugin-docs/compare/v0.21.0...v0.22.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/terraform-plugin-docs
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>

* Regenerate docs

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2025-07-08 13:23:01 -04:00

2.8 KiB

page_title, subcategory, description
page_title subcategory description
boundary_credential_store_vault Resource - terraform-provider-boundary The credential store for Vault resource allows you to configure a Boundary credential store for Vault.

boundary_credential_store_vault (Resource)

The credential store for Vault resource allows you to configure a Boundary credential store for Vault.

Example Usage

resource "boundary_scope" "org" {
  name                     = "organization_one"
  description              = "My first scope!"
  scope_id                 = "global"
  auto_create_admin_role   = true
  auto_create_default_role = true
}

resource "boundary_scope" "project" {
  name                   = "project_one"
  description            = "My first scope!"
  scope_id               = boundary_scope.org.id
  auto_create_admin_role = true
}

resource "boundary_credential_store_vault" "example" {
  name        = "foo"
  description = "My first Vault credential store!"
  address     = "http://127.0.0.1:8200"      # change to Vault address
  token       = "s.0ufRo6XEGU2jOqnIr7OlFYP5" # change to valid Vault token
  scope_id    = boundary_scope.project.id
}

Schema

Required

  • address (String) The address to Vault server. This should be a complete URL such as 'https://127.0.0.1:8200'
  • scope_id (String) The scope for this credential store.
  • token (String, Sensitive) A token used for accessing Vault.

Optional

  • ca_cert (String) A PEM-encoded CA certificate to verify the Vault server's TLS certificate.
  • client_certificate (String) A PEM-encoded client certificate to use for TLS authentication to the Vault server.
  • client_certificate_key (String, Sensitive) A PEM-encoded private key matching the client certificate from 'client_certificate'.
  • description (String) The Vault credential store description.
  • name (String) The Vault credential store name. Defaults to the resource name.
  • namespace (String) The namespace within Vault to use.
  • tls_server_name (String) Name to use as the SNI host when connecting to Vault via TLS.
  • tls_skip_verify (Boolean) Whether or not to skip TLS verification.
  • worker_filter (String) HCP Only. A filter used to control which PKI workers can handle Vault requests. This allows the use of private Vault instances with Boundary.

Read-Only

  • client_certificate_key_hmac (String) The Vault client certificate key hmac.
  • id (String) The ID of the Vault credential store.
  • token_hmac (String) The Vault token hmac.

Import

Import is supported using the following syntax:

The terraform import command can be used, for example:

terraform import boundary_credential_store_vault.foo <my-id>