saltext.vault

What it is and what it does

saltext-vault is a Salt extension that bridges Salt's configuration management with HashiCorp Vault or OpenBao for centralized secrets management. It allows Salt states and execution modules to authenticate with and retrieve secrets from Vault, enabling secure credential injection into infrastructure provisioning and configuration workflows.

The extension depends on salt and cryptography, and targets modern Python versions (3.10 through 3.14). It is actively maintained with recent releases and welcomes community contributions. The project is in Beta status and has no known security vulnerabilities.

Use it for:

• Retrieve database credentials from Vault during Salt state execution for application deployment.
• Manage API keys and tokens centrally in Vault while provisioning infrastructure with Salt.
• Integrate OpenBao as a Vault-compatible secrets backend for air-gapped or self-hosted environments.
• Automate secret rotation workflows by querying Vault dynamically during configuration updates.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

A Salt extension that integrates HashiCorp Vault (or OpenBao) with Salt for secrets management and configuration retrieval.

Yes, if you use Salt for infrastructure management and need Vault or OpenBao integration. The extension is actively maintained, has low install friction, carries a permissive license, and has no known vulnerabilities. It is suitable for production use in Beta status, though you should verify feature completeness for your specific Vault version and use case.

Install

saltext-vault on PyPI

pip install saltext-vault

uv add saltext-vault

poetry add saltext-vault

Installing saltext.vault

Before you install

Low install friction with a pure-Python wheel distribution. Active maintenance with a release 5 days old and recent commits; requires salt and cryptography as runtime dependencies.

License in practice

Apache Software License (permissive) allows commercial and private use with minimal restrictions, making it suitable for most deployment contexts.

Quickstart

pip install saltext-vault

from salt.ext.vault import vault_module
# Use within Salt states or execution modules to retrieve secrets from Vault

Requires Python 3.10 or later and a working Salt installation with cryptography support.

Verify before relying

• Specific Vault API versions or features supported by this extension version
• Whether OpenBao compatibility is feature-complete or partial
• Performance characteristics when retrieving large numbers of secrets

Package facts

Evidence: saltext_vault-1.8.0-py2.py3-none-any.whl

Keywords: salt-extension

Tags

More Cryptography packages