Drupal is a registered trademark of Dries Buytaert
Release: Drupal 10.3.6 — Update released for Drupal core (10.3.6)! Release: Drupal 11.0.5 — Update released for Drupal core (11.0.5)! Release: Drupal 10.2.9 — Update released for Drupal core (10.2.9)! Release: Drupal 10.2.10 — Update released for Drupal core (10.2.10)! Release: Drupal 10.3.7 — Update released for Drupal core (10.3.7)! Release: Drupal 11.0.6 — Update released for Drupal core (11.0.6)! Release: Drupal 10.3.8 — Update released for Drupal core (10.3.8)! Release: Drupal 11.0.7 — Update released for Drupal core (11.0.7)! Module Revived: Translation Management Tool 8.x-1.19 — Module tmgmt updated after 7 months of inactivity (8.x-1.19). Usage Milestone: Account field split — Module account_field_split crossed 10,000 active installs.
← All modules

Vault for Drupal

Security covered
View on drupal.org

Core APIs for integrating Drupal with Hashicorp Vault or the Linux Foundation OpenBao.

What is Vault for Drupal?

Vault for Drupal is a tool for securely accessing secrets using the Hashicorp Vault API.

A secret is anything that you want to tightly control access to, such as API keys, passwords, or certificates.

What is Hashicorp Vault or The Linux Foundation OpenBao?

Hashicorp Vault is a source available (BSL license) project.
The Linux Foundation OpenBao is an open source (MPL 2.0 license) fork of Hashicorp Vault.

Both provide secure storage of secrets outside of Drupal.

Hashicorp Vault

The Linux Foundation OpenBao

Why Vault/OpenBao with Drupal?

Unparalleled Feature-Set

Vault and OpenBao have a significant range of features for storing secrets in a secure manner:

Some features include:

  • Encrypted key/value storage
  • Encryption-as-a-service
  • Automatic rotation of credentials
  • Revocation of credentials
  • Audit logging for compliance and intrusion detection

Free and Open Source Software

The Drupal community has produced some excellent tooling to abstract secret storage and encryption. However there are issues with the ecosystem of tools which leverage these abstractions to perform the cryptographic functions.

  • Most of the existing integrations are for commercial services
  • The FOSS options are difficult to operate in a secure manner

Modules Integrating with Vault for Drupal

Authentication Strategies

Authentication strategies allow Drupal to securely authenticate with the secret storage.

Secret Engines

Secret engines provide a method for storing/retrieving static/dynamic secrets from the storage.

Encrypt-as-a-Service

Provides methods where encryption/decryption are performed by the secrets storage without revealing the cryptographic keys. Storage of the encrypted content is outside of the secrets server.

Depends on

Dependencies of the latest stable release

No dependencies recorded for this project.

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases
1
Tracked since
Nov 2024
Latest release
1 year ago
Releases (12 mo)
0 ▼ from 1
Maintenance
Dormant

Releases

Version Type Core Release date
3.0.0 Stable Nov 12, 2024