About Edge Vaults
Note The Vault integration is not available for Collibra Cloud sites.
As an Edge administrator, the Edge Vault feature allows you to integrate your Edge site with your existing vault provider and implement your organization’s credential management policies for Edge data sources.
A vault provider is a third-party secret management service, which should already be implemented by your organization. Your vault provider will store your data source information behind different types of Vault Keys, such as queries or names. Each vault may have specific storage requirements. You should review your vault provider's documentation for any of these requirements.
With the Edge Vaults integration:
- Pull sensitive information directly from your vault instead of manually entering your information into Edge as Kubernetes secrets.
- Add an extra layer of security as the vault provider establishes a secure connection to your data sources.
- Manage and rotate credentials in one central vault, rather than manually updating them in Edge.
Once your integrate your Edge site with your vault provider, you can create Edge connections which call to your vault to retrieve the data source information. You must enter the vault specific Vault Key for each data source property you need or want to pull into your connection. For example, if you want to pull a data source password into your Edge connection, and in your vault this data source password is stored by the secret name my-secret, then you would enter my-secret as the Vault Key for the password field.
Important If your data source connection requires a file to establish a secure connection, then the sensitive contents of the file must be encoded into Base64 and stored as a secret in your vault.
Edge supports the following vault integrations:
CyberArk Vault - Supported version:
- CyberArk Central Credential Provider (CCP) : 8.0.0
- Supported version:
HashiCorp Vault- Supported version:
- HashiCorp Vault 1.19.x
- Support secret engines:
- Supported version:
Azure Key Vault
AWS Secrets Manager
Google Secret Manager
- Integrate your Edge site to your vault provider.
- Learn how to set up an Edge connection with your vault.