SkillsAdd

davidcastagnetoa/skills

hashicorp_vault

Gestor centralizado de secretos con auditoría, rotación automática y lease management

First seen Mar 2, 2026

Installation

$ npx skills add davidcastagnetoa/skills --skill hashicorp_vault
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

hashicorp-vault Similar name
bagelhole/devops-security-agent-skills

Manage secrets and PKI with HashiCorp Vault. Configure secret engines, authentication methods, …

298 installs

Also in this package

Other skills from davidcastagnetoa/skills · top by installs.

npx skills add davidcastagnetoa/skills
traefik 116 prisma-nestjs-patterns 58 easyocr 50 exif_metadata_analyzer 30 c4_model_structurizr 28 configurable_thresholds 25 alembic 23 insightface_arcface 19 asyncpg 19 github_actions_cicd 16

Browse all from davidcastagnetoa/skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1
Default branch main
Open issues 0
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,536 B
  • docs SUMMARY.md 111 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 13 installs

SKILL.md

hashicorp_vault

HashiCorp Vault es el almacén central de todos los secretos del sistema: credenciales de BBDD, claves de cifrado, API keys. Ningún secreto debe estar en código o variables de entorno en texto plano.

When to use

Usar para gestionar todos los secretos del sistema. Los servicios deben obtener secretos de Vault en tiempo de ejecución.

Instructions

  1. Instalar y lanzar Vault en Kubernetes: usar el Helm chart oficial: helm install vault hashicorp/vault.
  2. Inicializar y unseal: vault operator init -key-shares=5 -key-threshold=3.
  3. Habilitar el secrets engine KV v2: vault secrets enable -path=kyc kv-v2.
  4. Almacenar secretos: vault kv put kyc/database password="secret".
  5. Configurar autenticación Kubernetes: vault auth enable kubernetes.
  6. En el código Python: usar hvac para obtener secretos: pip install hvac. client = hvac.Client(url='http://vault:8200';, token=os.getenv('VAULTTOKEN')). secret = client.secrets.kv.v2.readsecret_version(path='database').
  7. Activar auditing: vault audit enable file file_path=/vault/logs/audit.log.

Notes

  • Documentación: https://developer.hashicorp.com/vault
  • Dynamic secrets para BBDD: Vault genera credenciales PostgreSQL con TTL corto para cada servicio.
  • Usar Vault Agent Injector en Kubernetes para inyección automática de secretos en pods.