Vaccino

Traduzione: Copia tutti i comandi Traduzione: Generare PDF < > HashiCorp completo Comandi e flussi di lavoro Vault per la gestione dei segreti, la crittografia e l'accesso sicuro ai dati sensibili. ## Installazione e configurazione |Command|Description| |---------|-------------| |`vault version`|Show Vault version| |`vault server -dev`|Start development server| |`vault server -config=config.hcl`|Start with configuration file| |`vault status`|Check server status| ## Autenticazione & Login ### Autenticazione di base |Command|Description| |---------|-------------| |`vault auth -method=userpass username=myuser`|Login with username/password| |`vault auth -method=ldap username=myuser`|Login with LDAP| |`vault auth -method=github token=mytoken`|Login with GitHub| |`vault auth -method=aws`|Login with AWS IAM| |`vault auth -method=kubernetes`|Login with Kubernetes| ### Gestione dei token |Command|Description| |---------|-------------| |`vault token create`|Create new token| |`vault token create -ttl=1h`|Create token with TTL| |`vault token lookup`|Look up current token| |`vault token renew`|Renew current token| |`vault token revoke TOKEN`|Revoke specific token| ## Gestione dei segreti ### Segreti chiave-valore (v2) |Command|Description| |---------|-------------| |`vault kv put secret/myapp username=admin password=secret`|Store secret| |`vault kv get secret/myapp`|Retrieve secret| |`vault kv get -field=password secret/myapp`|Get specific field| |`vault kv delete secret/myapp`|Delete secret| |`vault kv list secret/`|List secrets| |`vault kv metadata get secret/myapp`|Get metadata| ### Versioni segrete |Command|Description| |---------|-------------| |`vault kv put secret/myapp @data.json`|Store from JSON file| |`vault kv get -version=2 secret/myapp`|Get specific version| |`vault kv rollback -version=1 secret/myapp`|Rollback to version| |`vault kv destroy -versions=2,3 secret/myapp`|Destroy versions| |`vault kv undelete -versions=2 secret/myapp`|Undelete versions| ## Database Secrets Engine ### Configurazione del database |Command|Description| |---------|-------------| |`vault secrets enable database`|Enable database engine| |`vault write database/config/my-mysql-database plugin_name=mysql-database-plugin connection_url="\\{\\{username\\}\\}:\\{\\{password\\}\\}@tcp(localhost:3306)/" allowed_roles="my-role" username="vaultuser" password="vaultpass"`|Configure MySQL| |`vault write database/roles/my-role db_name=my-mysql-database creation_statements="CREATE USER '\\{\\{name\\}\\}'@'%' IDENTIFIED BY '\\{\\{password\\}\\}';GRANT SELECT ON *.* TO '\\{\\{name\\}\\}'@'%';" default_ttl="1h" max_ttl="24h"`|Create role| ### Credenziali dinamiche |Command|Description| |---------|-------------| |`vault read database/creds/my-role`|Generate database credentials| |`vault write database/rotate-root/my-mysql-database`|Rotate root credentials| ## PKI (Infrastruttura chiave pubblica) ### Set di PKI |Command|Description| |---------|-------------| |`vault secrets enable pki`|Enable PKI engine| |`vault secrets tune -max-lease-ttl=87600h pki`|Set max TTL| |`vault write pki/root/generate/internal common_name=example.com ttl=87600h`|Generate root CA| |`vault write pki/config/urls issuing_certificates="http://vault.example.com:8200/v1/pki/ca" crl_distribution_points="http://vault.example.com:8200/v1/pki/crl"`|Configure URLs| ### Gestione certificati |Command|Description| |---------|-------------| |`vault write pki/roles/example-dot-com allowed_domains=example.com allow_subdomains=true max_ttl=72h`|Create role| |`vault write pki/issue/example-dot-com common_name=test.example.com`|Issue certificate| |`vault write pki/revoke serial_number=39:dd:2e:90:b7:23:1f:8d:d3:7d:31:c5:1b:da:84:d0:5b:65:31:58`|Revoke certificate| ## AWS Secrets Engine ### Configurazione AWS |Command|Description| |---------|-------------| |`vault secrets enable aws`|Enable AWS engine| |`vault write aws/config/root access_key=AKIAI... secret_key=R4nm...`|Configure root credentials| |`vault write aws/roles/my-role credential_type=iam_user policy_document=-<