Skip to content

Commit 0adeda2

Browse files
authored
Update prerequisites for HCP Vault Radar Copy Secrets to Vault (#1414)
Please go to the `Preview` tab and select the appropriate template: * [Consul](?expand=1&labels=Consul&title=Consul+Docs&template=consul_pull_request_template.md) * [HCP services](?expand=1&template=hcp_pull_request_template.md) * [Nomad](?expand=1&labels=Nomad&title=Nomad+Docs&template=nomad_pull_request_template.md) * [Terraform Enterprise](?expand=1&template=ptfe_release_pull_request_template.md)
2 parents 9f5e5bf + 55547fc commit 0adeda2

File tree

4 files changed

+28
-2
lines changed

4 files changed

+28
-2
lines changed

content/hcp-docs/content/docs/vault-radar/remediate-secrets/copy-secrets.mdx

Lines changed: 28 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,14 +15,40 @@ Before you begin, you need the following:
1515

1616
- The [HCP Vault Radar agent v0.27.0 or greater is running](/hcp/docs/vault-radar/agent/deploy) and configured
1717
- A HashiCorp Vault Enterprise or HCP Vault Dedicated cluster [configured for the Vault Radar Agent](/hcp/docs/vault-radar/agent/correlate-vault)
18-
- A Datasource onboarded using the HCP Vault Radar agent
18+
- A data source onboarded to HCP Vault Radar
19+
20+
## Configure HCP Vault Radar Data Sources
1921

2022
<Note>
2123

22-
Only Agent-based data sources are supported for this feature at this time.
24+
These instructions only apply to data sources onboarded using HCP Vault Radar.
25+
26+
If you have used the Vault Radar Agent to onboard a data source there is no further configuration needed for that data source.
2327

2428
</Note>
2529

30+
To support copying secrets to Vault, update the configured data sources.
31+
32+
1. Edit the data source configuration in the HCP UI.
33+
![Edit Data Source Details](/img/docs/vault-radar/remediation/copy-secrets/edit-data-source-details.png)
34+
35+
1. Check the box at the bottom of the data source details that says "Enable secret copying via Vault Radar Agent".
36+
![Enable Secret Copying via Vault Radar Agent](/img/docs/vault-radar/remediation/copy-secrets/enable-secret-copying-via-vault-radar-agent.png)
37+
38+
1. Provide the URI to an environment variable that contains a credential used to access the data source.
39+
40+
<Note>
41+
42+
You need to set this variable on all agent workers.
43+
44+
</Note>
45+
46+
![Enter Environment Variable Name](/img/docs/vault-radar/remediation/copy-secrets/enter-environment-variable-name.png)
47+
48+
1. Click **Save**.
49+
50+
The HCP Vault Radar data source is configured to copy secrets to Vault.
51+
2652
## Resource Based Access Control (RBAC)
2753

2854
The copy secrets feature does support RBAC. A user can be assigned a **Resource Contributor** role to a specific Resource(s). When visiting the Vault Radar portal the user will only be allowed to copy secrets for the Resource(s) they have access to.
16.2 KB
Loading
14.7 KB
Loading
24 KB
Loading

0 commit comments

Comments
 (0)