Thread
#prefect-community
    Adam Brusselback

    Adam Brusselback

    1 year ago
    Just wondering if anyone has used Prefect with Hashicorp Vault before? Any tricks to share?
    Dylan

    Dylan

    1 year ago
    Prefect Cloud uses Vault behind the scenes for Secrets 😉
    Adam Brusselback

    Adam Brusselback

    1 year ago
    Good to know lol, why isn't there a VaultTask then?! haha
    So if I wanted to write my own secret task for dealing with Vault, did you guys just use hvac?
    Dylan

    Dylan

    1 year ago
    We built our secrets-handling logic into our API directly, so our secrets Task just calls the API route
    But we’d welcome a VaultSecret Task contribution 👍
    b

    Brian Mesick

    1 year ago
    We’ve got one we use for our own Vault if you’d like a starting place @Adam Brusselback
    It uses
    hvac
    and extends
    prefect.tasks.secrets.SecretBase
    Adam Brusselback

    Adam Brusselback

    1 year ago
    @Brian Mesick Would absolutely love that as a starting point
    b

    Brian Mesick

    1 year ago
    Upon reflection it’s pretty specific to our K8s environment, but maybe better than nothing. Configuration is all in the constants (shame on us), Vault authentication happens through a service account JWT token stored on disk in K8s.