Use Codefresh Vault plugin to make key-value pairs stored in a vault available as environment variables for further steps.

NOTE: this plugin currently supports token authentication and Key/Value secrets engine only.

Set required and optional environment variables and add the following step to your Codefresh pipeline:

Example Variables:

The example below will authenticate to vault server https://vault.testdomain.io:8200 using token s.4wtaMJuZ7dv0c4XuRaasLUOG and export all secrets found in path secret/codefreshsecret as ENV variables available for further steps.

VAULT_ADDR=https://vault.testdomain.io:8200
VAULT_PATH=secret/codefreshsecret
VAULT_AUTH_TOKEN=s.4wtaMJuZ7dv0c4XuRaasLUOG

---
version: '1.0'

steps:

  ...

  Vault_to_Env:
    title: Importing vault values
    image: codefreshplugins/cf-vault-plugin
    environment:
      - VAULT_ADDR=${{VAULT_ADDR}}
      - VAULT_PATH=${{VAULT_PATH}}
      - VAULT_AUTH_TOKEN=${{VAULT_AUTH_TOKEN}}

  ...