Re: is there pgadmin interface with Hashicorp Vault or command line interface to use master password and update password repository - Mailing list pgsql-admin
From
Flavio Henrique Araque Gurgel
Subject
Re: is there pgadmin interface with Hashicorp Vault or command line interface to use master password and update password repository
all our postgres passwords are secured within a Hashicorp Vault. Postgres passwords currency cycle every 45 days Later this year DBA team will change that to Hourly.
it is easy enough to build a command line interface to retrieve a password from the vault and it is easy enough to pipe that into a psql session
what I would like to do is either use a command line interface wherein
I use the PGADMIN master password and perform maintenance on a password of a server OR have pgadmin use Hashicorp's api to pull password directly from vault.
what are my options?
I'm not a pgadmin fan and don't use it but I think it respects the env vars so PGPASSWORD would be an option as I do for psql here.
So you can try something like, in the same command like :
PGPASSWORD=`vault read your_secret_path_or_plugin` pgadmin Or do some bash mastery on your .bashrc to read the secret from vault every time you open your terminal.
