Using Vault Dashboard

Accessing Vault Dashboard

Vault Dashboard provides user interface for using the Vault service.

Before You Begin

Create an instance of Vault service.
Retrieve the token for your Vault instance. To retrieve the token, you can one of the following procedure:
- Bind your application to your instance of Vault service and view the details in the VCAP_SERVICES environment variable.
- Create a service key for your instance and retrieve the credentials by reading the service key.

Procedure

Retrieve the Dashboard URL. The Dashboard URL is part of your service instance details. Use the following command to view your instance details:
```
cf service <vault_service_instance>
```
The Dashboard parameter shows the Vault Dashboard details.
In a browser window, specify the Vault Dashboard URL.
The Vault Dashboard login page is displayed.
In the login page, specify the Token for your Vault service instance.
The Vault dashboard is displayed.

Managing Paths and Secrets Using Vault Dashboard

Vault dashboard displays the path information for an instance of Vault service. You can add, edit or delete paths and secrets in your Vault service instance. The secrets are stored as key value pairs.

About This Task

You can either use REST APIs to manage the paths or use the Vault dashboard UI. For more information on using the APIs, see Managing Paths and Secrets.

The following procedure shows managing paths and secrets using the Vault dashboard.

Procedure

Log in to Vault Dashboard.
For more details see vault-service-using-dashboard.html#task_fcb2a88e-5302-4ada-b886-ad5670c5a88a.
To add a new path, click on the plus sign (+) next to the home folder in Paths pane.
Specify the name of the sub-path and click the check mark next to it.
The default path location is equivalent to the vault instance URL. You can retrieve the Vault service instance URL from the VCAP_SERVICES environment variable after binding it to an application or by creating a service key. The sub-path that you specify is then appended to the default location.
For example, if your default path was https://predix-vault-asv-sb.gecis.io/v1/secret/0e90b8cf-e023-4f56-9ad0-69b9a09f9914/f3eaa2a7/39ba8924-a57e-47ec and you specify the sub-path as time-series, you new path is https://predix-vault-asv-sb.gecis.io/v1/secret/0e90b8cf-e023-4f56-9ad0-69b9a09f9914/f3eaa2a7/39ba8924-a57e-47ec/time-series.
To remove a sub-path, click on the minus (-) sign next to the sub-path name.
When you remove a sub-path, all the key value information stored in that path is deleted as well.
Specify the name of the key and the corresponding value in the Keys and Values fields.

Note: If you do not specify a key value pair for a path, the path information is not saved.
Click Add.