Comments (2)
Not through the bosh release really. You could update your vault config to do things like disable the UI entirely but as you've pointed out API endpoints are still available.
I think the more common practice in all the places I've worked would be to not expose your Vault server to a "public network" (however you choose to define that given your threat model) at all. There may be issues in the Vault project itself that talk about information leakage in more detail but it's definitely not within the scope or ability of the Bosh release wrapping.
I can tell you in the places I've used Vault we opt to only make it accessible from a small group of subnets within a given VPC.
from vault-boshrelease.
Closing as this is more of an issue for the Vault project itself per my note above but feel free to reopen if you want to discuss further.
from vault-boshrelease.
Related Issues (20)
- Upgrade to Vault 0.9.0 HOT 1
- Support Raw Configuration / Eliminate Backends HOT 5
- Cut a new release please! HOT 3
- LDAP Auth Method HOT 1
- Prep Next Release HOT 1
- cluster_address and redirect_address in README.me HOT 4
- post-start failed HOT 10
- vault post-start failed due to SSL check error HOT 3
- Vault HA configurations, how to use, and how it works? HOT 1
- Sample manifest doesn't include generated CA
- Sample manifest does not persist data
- post-start script pass but no changes, vault is sealed HOT 9
- DynamoDB Unmarshal errors HOT 2
- Cut releases for Vault 0.11.1 and 0.11.2? HOT 3
- vault: 0.11.5 released HOT 3
- vault v1.0.1 HOT 2
- vault v1.0.3 HOT 1
- Upgrade to vault 1.4.2 HOT 5
- Support for Vault 1.13
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vault-boshrelease.