Configuring Auth Methods using the API

​

Introduction

• Enabling the AppRole auth method
• Creating an AppRole with specific policies
• Retrieving the Role ID and Secret ID
• Authenticating with the generated credentials

​

Prerequisites

• A running Vault server at http://127.0.0.1:8200
• A valid Vault token exported as an environment variable:

export VAULT_TOKEN="s.TEKrNn3Cv53pZdbPh8xg4TPu"

​

1. Enable the AppRole Auth Method

1. Create an auth.json file:
   {
     "type": "approle"
   }
   
2. Use curl to enable AppRole:
   curl --header "X-Vault-Token: $VAULT_TOKEN" \
        --request POST \
        --data @auth.json \
        http://127.0.0.1:8200/v1/sys/auth/approle
   
3. Verify the mount:
   vault auth list
   

​

2. Create an AppRole with Policies

1. Create policies.json:
   {
     "policies": ["bryan"]
   }
   
2. Create the AppRole named vaultcourse:
   curl --header "X-Vault-Token: $VAULT_TOKEN" \
        --request POST \
        --data @policies.json \
        http://127.0.0.1:8200/v1/auth/approle/role/vaultcourse
   

​

3. Fetch the Role ID

curl --header "X-Vault-Token: $VAULT_TOKEN" \
     http://127.0.0.1:8200/v1/auth/approle/role/vaultcourse/role-id | jq

​

4. Generate a Secret ID

curl --header "X-Vault-Token: $VAULT_TOKEN" \
     --request POST \
     http://127.0.0.1:8200/v1/auth/approle/role/vaultcourse/secret-id | jq

• data.secret_id
• data.secret_id_accessor

curl --request POST \
     --data '{"role_id":"<ROLE_ID>","secret_id":"<SECRET_ID>"}' \
     http://127.0.0.1:8200/v1/auth/approle/login

​

Quick Reference Table

​

Links and References

• Vault AppRole Auth Method Documentation
• Vault API Reference
• HashiCorp Vault GitHub