# using hashicorp vault & tower

**URL:** <https://forum.ansible.com/t/using-hashicorp-vault-tower/29467>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [January 18, 2019, 4:35pm UTC](https://forum.ansible.com/t/using-hashicorp-vault-tower/29467 "2019-01-18T16:35:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dmakovey](https://avatars.discourse-cdn.com/v4/letter/d/4da419/32.png) [@dmakovey](https://forum.ansible.com/u/dmakovey)\
**Post date:** [January 18, 2019, 4:35pm UTC](https://forum.ansible.com/t/using-hashicorp-vault-tower/29467/1 "2019-01-18T16:35:25Z")

</div>

Hi,

I'm researching ways to integrate hashicorp vault with AWX.

I did go through

[https://www.ansible.com/blog/ansible-tower-feature-spotlight-custom-credentials](https://www.ansible.com/blog/ansible-tower-feature-spotlight-custom-credentials)

and

[https://www.hashicorp.com/blog/authenticating-applications-with-vault-approle](https://www.hashicorp.com/blog/authenticating-applications-with-vault-approle)

but there's a bit of disconnect (from my perspective) between those  
samples and real life. Is anybody using such combination in real life?  
Can you share details of implementation?

What I'm struggling with is how to glue together AWX's custom  
credentials, and AppRole auth type with Vault (or should I \*not\* use  
AppRole?) in the most Ansible-esque way. I see that I can bypass being  
ansible-friendly and just use "url" module to interact with vault, but  
that doesn't sound like a viable solution (short of building our own  
module). Any real-life example are greatly appreciated.

---

<div class="post-metadata">

**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\
**Post date:** [January 18, 2019, 7:20pm UTC](https://forum.ansible.com/t/using-hashicorp-vault-tower/29467/2 "2019-01-18T19:20:55Z")

</div>

fwiw we’re working on this as a primary credential source at the moment, you can follow along here: [https://github.com/ansible/awx/issues/2238](https://github.com/ansible/awx/issues/2238)

---

<div class="post-metadata">

**Author:** ![dmakovey](https://avatars.discourse-cdn.com/v4/letter/d/4da419/32.png) [@dmakovey](https://forum.ansible.com/u/dmakovey)\
**Post date:** [January 18, 2019, 10:20pm UTC](https://forum.ansible.com/t/using-hashicorp-vault-tower/29467/3 "2019-01-18T22:20:34Z")

</div>

THIS. IS. AWESOME. 😃

thank you 🙂