<commit_before>Vault - Secure Credentials Storage
==================================

This [BOSH][bosh] release packages the excellent [Vault][vault]
software from [Hashicorp][hashicorp], so that you can run your own
secure credentials storage vault on your BOSH infrastructure,
today!


Getting Started on BOSH-lite
----------------------------

Before you can start spinning a vault, you will need to upload the
BOSH release to your director:

    bosh target https://192.168.50.4:25555
    bosh upload release https://bosh.io/d/github.com/cloudfoundry-community/vault-boshrelease

You can create a small, working manifest file from this git
repository:

    git clone https://github.com/cloudfoundry-community/vault-boshrelease
    cd vault-boshrelease
    ./templates/make_manifest warden
    bosh -n deploy

Vault should be up and running at
[http://10.244.8.2:8200](http://10.244.8.2:8200), but it still
needs some manual setup, due to security precautions.

First, you need to initialize the vault:

    export VAULT_ADDR=http://10.244.8.2:8200
    vault init

This generates a root encryption key for encrypting all of the
secrets.  At this point, the vault is _sealed_, and you will need
to unseal it three times, each time with a different key:

    vault unseal
    vault unseal
    vault unseal

Once unsealed, your vault should be ready for authentication with
your _initial root token_:

    vault auth

Now, you can put secrets in the vault, and read them back out:
<commit_msg>fixed readme<commit_after>Vault - Secure Credentials Storage
==================================

This [BOSH][bosh] release packages the excellent [Vault][vault]
software from [Hashicorp][hashicorp], so that you can run your own
secure credentials storage vault on your BOSH infrastructure,
today!


Getting Started on BOSH-lite
----------------------------

Before you can start spinning a vault, you will need to upload the
BOSH release to your director:

    bosh target https://192.168.50.4:25555
    bosh upload release https://bosh.io/d/github.com/cloudfoundry-community/vault-boshrelease

You can create a small, working manifest file from this git
repository:

    git clone https://github.com/cloudfoundry-community/vault-boshrelease
    cd vault-boshrelease
    ./templates/make_manifest warden
    bosh -n deploy

Vault should be up and running at
[http://10.244.8.3:8200](http://10.244.8.3:8200), but it still
needs some manual setup, due to security precautions.

First, you need to initialize the vault:

    export VAULT_ADDR=http://10.244.8.3:8200
    vault init

This generates a root encryption key for encrypting all of the
secrets.  At this point, the vault is _sealed_, and you will need
to unseal it three times, each time with a different key:

    vault unseal
    vault unseal
    vault unseal

Once unsealed, your vault should be ready for authentication with
your _initial root token_:

    vault auth

Now, you can put secrets in the vault, and read them back out:

{'fraction_non_alphanumeric': 0.10586264656616415, 'fraction_numerical': 0.03149078726968174, 'mean_word_length': 3.6366459627329193, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 6, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 8, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1129934', 'n_tokens_mistral': 941, 'n_tokens_neox': 848, 'n_words': 361}