<%- include('top') %>

<% if (vaultIsAdmin) { %> Vault Secrets (admin — all of secret/) <% } else { %> My Secrets (personal namespace)<% } %>

Secrets List
Loading...

Select a secret to view its details

<% if (vaultIsAdmin) { %>
Mint an app token

Mints a scoped OpenBao token confined to secret/apps/<name>/* for an external app. The token is shown once — record it in the app immediately; it cannot be recovered later.

App token

Give the external app this token (header X-Vault-Token) and the path convention below.


              
Connection convention

              
VAULT_ADDR=<%- vaultAddr %>
path=secret/apps/<name>/conf
curl "$VAULT_ADDR/v1/secret/data/apps//conf" \
  -H "X-Vault-Token: <token above>"

            

          

        

      

    

    <% } %>
  









<%- include('bottom') %>