This document provides an agenda and overview for a virtual meetup on Hashicorp Vault. The meetup will include introductions by the organizers and sponsor, an introduction to Vault including its features and use cases, a demo, and Q&A. The speaker will discuss using Vault with MuleSoft and show how to store and retrieve credentials from Vault.

1. 11 April 2021
Chandigarh MuleSoft Meetup Group
Hashicorp Vault

2. 2
Guidelines for our Virtual Meetup
1. You can write down your questions in the chat during the session.
2. Once we are done with the day, don’t forget to provide your
valuable feedback.

3. 3
●About the organizers:
○ Suresh Rathore
○ Lalit Panwar
○ Ajay Rana
Introductions
A SHOW OF HANDS:
Who is new to this Meetup?
●About the sponsor:
○ MuleSoft

4. 4
About the speaker:
● Working as Solution Consultant with Apisero
● Mulesoft Certified Developer

5. 5
● Introduction to Vault
● Features of Vault
● Hashicorp Vault with MuleSoft
● Use cases
● Demo
● Q&A
Agenda

6. Credential Manager
Hashicorp Vault

7. 7
● Vault is a tool for securely accessing secrets. A secret is anything that you want to tightly control
access to, such as API keys, passwords, or certificates.
● Vault provides a unified interface to any secret, while providing tight access control and
recording a detailed audit log.
● A modern system requires access to a multitude of secrets: database credentials, API keys for
external services, credentials for service-oriented architecture communication, etc.
● Understanding who is accessing what secrets is already very difficult and platform-specific.
● Adding on key rolling, secure storage, and detailed audit logs is almost impossible without a
custom solution. This is where Vault steps in.
Introduction

8. 8
● Secure Secret Storage (in-memory, Consul, file, and more)
● Dynamic Secrets
● Data Encryption Leasing and Renewal
● Revocation
● Auditing
● Multiple Client Authentication Methods
Features

9. Seal / Unseal
● When a Vault server is started, it starts in a sealed state. In this state, Vault is configured to
know where and how to access the physical storage, but doesn't know how to decrypt any of
it.
● Unsealing is the process of obtaining the plaintext master key necessary to read the
decryption key to decrypt the data, allowing access to the Vault.
● Prior to unsealing, almost no operations are possible with Vault. For example authentication,
managing the mount tables, etc. are all not possible. The only possible operations are to
unseal the Vault and check the status of the seal.
9

10. Commands
● vault server -dev
● vault -h
● vault secrets enable -path=<path> <engine>
● vault kv put <engine>/<path> <key>=<value>
● vault kv patch <engine>/<path> <key>=<value>
● vault kv delete <engine>/<path>
● vault secrets list
● vault token create
● vault login <token>
● vault kv put <engine_name>/<path> @<filename.json>
10

11. APIs
Retrieve Secret using API
● curl --location --request GET 'localhost:8200/<api_version>/<engine>/data/<path>'
--header 'X-Vault-Token: <token>'
● curl --location --request GET 'localhost:8200/v1/kv/data/salesforce/credentials'
--header 'X-Vault-Token: s.gup8UFzTiFHv0f4MO8K0cEiW'
11

12. Use Case 1 : Vault Properties Connector
● Store credentials in vault
● Configure Vault Properties Connector
● Configure Credentials in Salesforce Connector
● Flow to fetch Account object record
12

13. Use case 2 : Cache Credentials
● Store Credentials in Vault
● Fetch Credentials from Vault and Cache
● Configure Credentials in Salesforce Connector
● Flow to fetch Account object record
13

15. Q&A

16. Further Resources

17. Further Resources
● Vault:
https://www.vaultproject.io/docs/what-is-vault
https://www.vaultproject.io/api-docs
● Vault Mule 4 Connector:
https://github.com/avioconsulting/mule-vault-properties-provider

18. Trivia Questions

19. 19
● Share:
○ Tweet your pictures or posts using the hashtag #MuleSoftMeetups
○ Invite your network to join: https://meetups.mulesoft.com/chandigarh/
● Feedback:
○ Fill out the survey feedback and suggest topics for upcoming events
○ Contact MuleSoft at meetups@mulesoft.com for ways to improve the program
It always seems impossible until it is done - NELSON MANDELA
What’s next?

20. Thank you