Feature request: Vault backend

Is it possible to add vault as a backend to terraform? Currently we have consul and etcd, which can work with vault, but nothing exists out of the box as an encrypted data backend. This was already suggested [here](https://github.com/hashicorp/terraform/issues/516#issuecomment-248975515) in a thread which discusses how secrets/sensitive data should be stored in state files. It seems that the [terraform provider](https://www.terraform.io/docs/providers/vault/index.html) allows you to populate arbitrary configuration into vault, but I'd like something for tfstate. There exists an [encryption proposal](https://github.com/hashicorp/terraform/issues/9556) which might solve the same problem, but perhaps it'd be easier to delegate the heavy lifting to Vault and have terraform use its HTTP(S) API. Is this a feasible solution or does there exist a better alternative? If so, would it require an enormous effort to implement?

Posted by jamiehannaford on Sep 11, 2017, 2:19 PM

Tags

• github (Software)

Related issues

• [Meta] Feedback on granular control over Copilot changes
• unexpected status 401 Unauthorized issue
• [MODEL] Measurable quality regression in Claude generation 5 (Fable 5 / Opus 5 / Sonnet 5): worse nonsense detection, ~2x verbosity, under-disclosed model fallb
• [CRITICAL] Subagent spawning and subagent pattern bugs trigger infinite recursion, infinite token usage, grossly inefficient token usage, and lost accumulated s
• Video stops playing after some minutes
• [MODEL] Claude verbose code comments by default — ignores instructions to stop.