External vault integration

Uses: Insomnia

Insomnia supports integrating with external vault service providers to retrieve secret values automatically when sending requests.

Supported vault services:

AWS Secrets Manager

  1. Navigate to Preferences > Cloud Credentials.
  2. Click Add Credentials, select AWS, and enter your temporary security credentials.
  3. Open AWS Secrets Manager from the context menu.
  4. Fill in the required fields:
    • Secret name
    • Secret version
    • Secret type

GCP Secret Manager

  1. Navigate to Preferences > Cloud Credentials.
  2. Click Add Credentials, select GCP, and upload your service account key.
  3. Open GCP Secrets Manager from the context menu.
  4. Fill in the required fields:
    • Secret name
    • Secret version

HashiCorp Vault

  1. Navigate to Preferences > Cloud Credentials.
  2. Click Add Credentials, select HashiCorp, and choose your environment:

Open HashiCorp Vault from the context menu and fill in the fields based on the environment:

Azure Key Vault

  1. Navigate to Preferences > Cloud Credentials.
  2. Click Add Credentials, select Azure.
  3. You will be redirected to authorize Insomnia in your browser.
  4. After authorization, you’ll return to Insomnia with your Azure account credential added.
  5. Open Azure Key Vault from the context menu.
  6. Enter the Secret Identifier for the secret you want to access.

Vault secrets cache

Vault secret caching works like the following in Insomnia:

  • Secrets retrieved from cloud vault services are cached in memory for 30 minutes by default.
  • If the cache expires or is missing, Insomnia re-fetches the secret automatically.
  • You can configure cache duration and reset the cache in Preferences > Cloud Credentials.
Something wrong?

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!