Bring your towel and join one of the fastest growing data communities. Welcome to our second-generation open source orchestration platform, a completely rethought approach to dataflow automation.

Prefect Community

Just wondering if anyone has used Prefect with Hashicorp Vault before? Any tricks to share?

Prefect Cloud uses Vault behind the scenes for Secrets :wink:

Good to know lol, why isn't there a VaultTask then?! haha

So if I wanted to write my own secret task for dealing with Vault, did you guys just use hvac?

We built our secrets-handling logic into our API directly, so our secrets Task just calls the API route

But we’d welcome a VaultSecret Task contribution :thumbsup:

We’ve got one we use for our own Vault if you’d like a starting place <@U01LF0ZQS92>

It uses `hvac` and extends `prefect.tasks.secrets.SecretBase`

<@UPTKY3848> Would absolutely love that as a starting point

Untitled

Upon reflection it’s pretty specific to our K8s environment, but maybe better than nothing. Configuration is all in the constants (shame on us), Vault authentication happens through a service account JWT token stored on disk in K8s.