Hide versioning information about vault-boshrelease HOT 2 CLOSED

Not through the bosh release really. You could update your vault config to do things like disable the UI entirely but as you've pointed out API endpoints are still available.

I think the more common practice in all the places I've worked would be to not expose your Vault server to a "public network" (however you choose to define that given your threat model) at all. There may be issues in the Vault project itself that talk about information leakage in more detail but it's definitely not within the scope or ability of the Bosh release wrapping.

I can tell you in the places I've used Vault we opt to only make it accessible from a small group of subnets within a given VPC.

from vault-boshrelease.

Closing as this is more of an issue for the Vault project itself per my note above but feel free to reopen if you want to discuss further.

from vault-boshrelease.