vault_mount

This resource enables a new secrets engine at the given path.

Example Usage

resource "vault_mount" "example" {
  path        = "dummy"
  type        = "generic"
  description = "This is an example mount"
}
resource "vault_mount" "kvv2-example" {
  path        = "version2-example"
  type        = "kv-v2"
  options = {
    version = "2"
    type    = "kv-v2"
  }
  description = "This is an example KV Version 2 secret engine mount"
}
resource "vault_mount" "transit-example" {
  path        = "transit-example"
  type        = "transit"
  description = "This is an example transit secret engine mount"

  options = {
    convergent_encryption = false
  }
}
resource "vault_mount" "pki-example" {
  path        = "pki-example"
  type        = "pki"
  description = "This is an example PKI mount"

  default_lease_ttl_seconds = 3600
  max_lease_ttl_seconds     = 86400
}

Argument Reference

The following arguments are supported:

Attributes Reference

In addition to the fields above, the following attributes are exported:

Import

Mounts can be imported using the path, e.g.

$ terraform import vault_mount.example dummy