Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -15,14 +15,40 @@ Before you begin, you need the following:

- The [HCP Vault Radar agent v0.27.0 or greater is running](/hcp/docs/vault-radar/agent/deploy) and configured
- A HashiCorp Vault Enterprise or HCP Vault Dedicated cluster [configured for the Vault Radar Agent](/hcp/docs/vault-radar/agent/correlate-vault)
- A Datasource onboarded using the HCP Vault Radar agent
- A data source onboarded to HCP Vault Radar

## Configure HCP Vault Radar Data Sources

<Note>

Only Agent-based data sources are supported for this feature at this time.
These instructions only apply to data sources onboarded using HCP Vault Radar.

If you have used the Vault Radar Agent to onboard a data source there is no further configuration needed for that data source.

</Note>

To support copying secrets to Vault, update the configured data sources.

1. Edit the data source configuration in the HCP UI.
![Edit Data Source Details](/img/docs/vault-radar/remediation/copy-secrets/edit-data-source-details.png)

1. Check the box at the bottom of the data source details that says "Enable secret copying via Vault Radar Agent".
![Enable Secret Copying via Vault Radar Agent](/img/docs/vault-radar/remediation/copy-secrets/enable-secret-copying-via-vault-radar-agent.png)

1. Provide the URI to an environment variable that contains a credential used to access the data source.

<Note>

You need to set this variable on all agent workers.

</Note>

![Enter Environment Variable Name](/img/docs/vault-radar/remediation/copy-secrets/enter-environment-variable-name.png)

1. Click **Save**.

The HCP Vault Radar data source is configured to copy secrets to Vault.

## Resource Based Access Control (RBAC)

The copy secrets feature does support RBAC. A user can be assigned a **Resource Contributor** role to a specific Resource(s). When visiting the Vault Radar portal the user will only be allowed to copy secrets for the Resource(s) they have access to.
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading