serverless-vault-plugin

A basic serverless plugin that integrates serverless with hashicorp vault.

It adds the specified secrets the serverless provider's environment object, with any variables set in serverless.yml overriding those from vault It also allows access to individual vault secrets via the variable syntax ${vault:SECRET_NAME}

Example Usage

plugins:
  - "@financial-times/serverless-vault-plugin"
custom:
  vaultConfig:
    host: vault.in.ft.com
    roleId: ${env:VAULT_ROLE_ID, ''}
    secretId: ${env:VAULT_SECRET_ID, ''}
    paths:
      - teams/community/shared/${opt:stage, self:provider.stage}
      - teams/community/${self:service}/shared
      - teams/community/${self:service}/${opt:stage, self:provider.stage}
  some_value: ${vault:SOME_SECRET_STORED_IN_VAULT}