Vault

Purpose

Manage secrets, encryption, and access control using HashiCorp Vault.

Agent Protocol

Trigger

Exact user phrases: "Vault", "HashiCorp Vault", "secrets management", "dynamic secrets", "transit engine", "Vault policy", "Vault auth method", "Vault agent", "Vault injector", "secret engine", "kv-v2", "Vault role", "Vault token".

Input Context

Before activating, verify:

• Vault deployment mode (dev, HA, integrated storage, external backend).
• Auth method to use (token, Kubernetes, OIDC, AppRole, AWS IAM).
• Secrets engine needed (KV, database, PKI, Transit, AWS).
• Dynamic vs static secret requirements.

Output Artifact

Writes to Vault CLI commands, Terraform HCL for Vault, Vault policy HCL, and/or Kubernetes injector annotations.