diff options
| author | Dave Henderson <dhenderson@gmail.com> | 2017-03-11 13:50:51 -0500 |
|---|---|---|
| committer | Dave Henderson <dhenderson@gmail.com> | 2017-03-11 13:58:08 -0500 |
| commit | 28c515090fa99655ab495f1017b86ee4518bb96f (patch) | |
| tree | 44db861376867b1d4e9d5f588eef75d729d1f2d4 /README.md | |
| parent | 65c4abc5ed0798d37afdc3e7729f52106c089577 (diff) | |
Allow custom auth backend mount point
Signed-off-by: Dave Henderson <dhenderson@gmail.com>
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 9 |
1 files changed, 6 insertions, 3 deletions
@@ -577,9 +577,12 @@ The special `vault://` URL scheme can be used to retrieve data from [Hashicorp Vault](https://vaultproject.io). To use this, you must put the Vault server's URL in the `$VAULT_ADDR` environment variable. -Currently, the [`app-id`](https://www.vaultproject.io/docs/auth/app-id.html) -auth backend is supported, as well as Vault tokens obtained through external -means. +This table describes the currently-supported authentication mechanisms and how to use them, in order of precedence: + +| auth backend | configuration | +| ---: |--| +| [`app-id`](https://www.vaultproject.io/docs/auth/app-id.html) | Environment variables `$VAULT_APP_ID` and `$VAULT_USER_ID` must be set to the appropriate values.<br/> If the backend is mounted to a different location, set `$VAULT_AUTH_APP_ID_MOUNT`. | +| [`token`](https://www.vaultproject.io/docs/auth/token.html) | Determined from either the `$VAULT_TOKEN` environment variable, or read from the file `~/.vault-token` | To use a Vault datasource with a single secret, just use a URL of `vault:///secret/mysecret`. Note the 3 `/`s - the host portion of the URL is left |
