scottk/vault
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-11-01 11:08:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add documentation for new rootless password rotation workflow for DB Static Roles (#28374)

Browse Source 
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
This commit is contained in:
vinay-gopalan
2024-10-07 08:51:30 -07:00
committed by GitHub
parent 69411d7925
commit 08e8776dfb
3 changed files with 76 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
website/content/api-docs/secret/databases/index.mdx
View File

@@ -534,6 +534,11 @@ this in order to know the password.
- `username` `(string: <required>)` – Specifies the database username that this
Vault role corresponds to.
- `self_managed_password` `(string)` – <EnterpriseAlert product="vault" inline />
The password corresponding to the username in the database. Required when using
the Rootless Password Rotation workflow for static roles. Only enabled for select
DB engines (Postgres).
- `db_name` `(string: <required>)` - The name of the database connection to use
for this role.

4
website/content/api-docs/secret/databases/postgresql.mdx
View File

@@ -51,6 +51,10 @@ has a number of parameters to further configure a connection.
- `password` `(string: "")` - The root credential password used in the connection URL.
- `self_managed` `(boolean: "false")` - <EnterpriseAlert product="vault" inline /> If
set, allows onboarding static roles with a rootless connection configuration. Mutually
exclusive with `username` and `password`. If set, will force `verify_connection` to be false.
- `tls_ca` `(string: "")` - The x509 CA file for validating the certificate
presented by the PostgreSQL server. Must be PEM encoded.