.. rpr1596551983445
.. _vault-aware:

===========
Vault Aware
===========

The Vault Aware method involves writing an application to connect directly to
a Vault server using Vault REST APIs. The Vault REST APIs requires an
existing Auth method and policy to be created; the specific method depends on
the client libraries used.

The Vault REST API is used to allow an application to read and/or write secrets
to Vault, provided the applicable policy gives read and/or write permission at
the specified Vault path. The Vault REST API can be accessed from application
containers using the Vault endpoint **sva-vault**. Run the following command
to view Vault endpoints:

.. code-block:: none

    $ kubectl get svc -n vault

.. seealso::

    .. _vault-aware-ul-rlf-zw1-pmb:

    -   Vault REST API:

        -   `https://learn.hashicorp.com/vault/getting-started/apis
            <https://learn.hashicorp.com/vault/getting-started/apis>`__

        -   `https://www.vaultproject.io/api-docs
            <https://www.vaultproject.io/api-docs>`__


    -   Client libraries: `https://www.vaultproject.io/api/libraries.html
        <https://www.vaultproject.io/api/libraries.html>`__

    -   Connect Vault with Python using the HVAC library:
        `https://github.com/hvac/hvac <https://github.com/hvac/hvac>`__