HashiCorp Vault

Overview
Vault on OneCloudPlanet — the secrets hub of your infrastructure: applications fetch passwords and keys via API with access control and audit, not from files in a repo.

What is Vault?
The industry standard for secrets management by HashiCorp: storage and rotation, dynamic DB credentials, PKI for certificates, detailed audit logs.

Why on OneCloudPlanet?
Secrets out of git: a leaked repo no longer means leaked passwords.
Recommended configuration: 2 vCPU / 4 GB. See pricing.
VPC: Vault reachable only by your services, no public IP.
BUSL license: free for self-use without limits (restrictions apply only to competing SaaS offerings).

How to launch
1) Sign in at console.ocplanet.cloud
2) Open Marketplace and choose Vault
3) Pick a configuration and location
4) Wait for deploy
5) Change the default credentials

Post-deploy checklist
• Initialize Vault and store unseal keys offline
• Enable audit logging
• Least-privilege access policies
• Scheduled storage backups

FAQ
Vault or Infisical? Vault is the industry standard with maximum capabilities; Infisical is a simpler start for small teams.
If I lose unseal keys? Data becomes unrecoverable — keep keys in several secure places.