Vault Proxy Authentication Methods

Approle

Some of Vault’s plugins support only Approle authentication.

For those types of plugins, you’ll need to specify role_id & secret_id, for using HVP you’ll need to use Access Id & Access key replacing role_id & secret_idcorrespondingly.

For example, Vault Approle authentication using HVP:

export VAULT_ADDR='https://hvp.akeyless.io'
vault write auth/approle/login role_id="<Access Id>" secret_id="<Access Key>"

JWT

To work with Vault plugins using JWT authentication for example GitLab:

job:
  variables:
    VAULT_SERVER_URL: 'https://hvp.akeyless.io'
    VAULT_AUTH_PATH: jwt
    VAULT_AUTH_ROLE: <Access ID>
  id_tokens:
    VAULT_ID_TOKEN:
      aud: https://gitlab.com

set the VAULT_AUTH_ROLE with your Akeyless Authentication Method Access ID and the VAULT_AUTH_PATH with jwt. In general, the Vault role should be set with your Aceess ID.