---
id: saltext-vault
version: "1.8.0"
license: Apache Software License
license_treatment: permissive
maintenance: active
---

# saltext.vault — Salt Extension for interacting with Vault (or OpenBao)

License: permissive · Maintenance: active · Downloads: 109.2K/mo

## What it is and what it does

saltext-vault is a Salt extension that bridges Salt's configuration management with HashiCorp Vault or OpenBao for centralized secrets management. It allows Salt states and execution modules to authenticate with and retrieve secrets from Vault, enabling secure credential injection into infrastructure provisioning and configuration workflows.

The extension depends on salt and cryptography, and targets modern Python versions (3.10 through 3.14). It is actively maintained with recent releases and welcomes community contributions. The project is in Beta status and has no known security vulnerabilities.

Use it for:

- Retrieve database credentials from Vault during Salt state execution for application deployment.
- Manage API keys and tokens centrally in Vault while provisioning infrastructure with Salt.
- Integrate OpenBao as a Vault-compatible secrets backend for air-gapped or self-hosted environments.
- Automate secret rotation workflows by querying Vault dynamically during configuration updates.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

A Salt extension that integrates HashiCorp Vault (or OpenBao) with Salt for secrets management and configuration retrieval.

Yes, if you use Salt for infrastructure management and need Vault or OpenBao integration. The extension is actively maintained, has low install friction, carries a permissive license, and has no known vulnerabilities. It is suitable for production use in Beta status, though you should verify feature completeness for your specific Vault version and use case.

## Install

pip install saltext-vault
uv add saltext-vault
poetry add saltext-vault

## Installing saltext.vault

Before you install: Low install friction with a pure-Python wheel distribution. Active maintenance with a release 5 days old and recent commits; requires salt and cryptography as runtime dependencies.

License in practice: Apache Software License (permissive) allows commercial and private use with minimal restrictions, making it suitable for most deployment contexts.

Quickstart:

pip install saltext-vault

from salt.ext.vault import vault_module
# Use within Salt states or execution modules to retrieve secrets from Vault

Requires Python 3.10 or later and a working Salt installation with cryptography support.

Verify before relying:

- Specific Vault API versions or features supported by this extension version
- Whether OpenBao compatibility is feature-complete or partial
- Performance characteristics when retrieving large numbers of secrets

## Package facts

- License: Apache Software License (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 109.2K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

salt vault integration, hashicorp vault salt, secrets management salt, openbao salt extension, salt cryptography vault, infrastructure secrets salt, salt-extension, secrets-management, vault-integration

[View on SkillFed](https://skillfed.io/packages/saltext-vault) · [View on PyPI](https://pypi.org/project/saltext-vault/)