Skip to main content

A small library that allows Django apps to consume Vaultkeeper output as resource secrets.

Project description

A small library that allows Django applications to consume vaultkeeper output as resource secrets.

django-vaultkeeper-adaptor supports the SET_ROLE operation necessary to revoke dynamically-generated PostgreSQL credentials.

Installing the Package

Clone this project and install the package from source with the following commands in the root directory of the repository:
$ pip install -e .

Install the package for development with the following command:

$ pip install -e .[test]


Technically, you do not need to launch your application with vaultkeeper to use this library, as it is simply an input adaptor. However, using your app with vaultkeeper is strongly recommended.

It is assumed that the rest of your Vault workflow is already configured and running. If you are using the PostgreSQL secret backend with Django, it is necessary to use django-postgresql-setrole in your application as well.

How to Use

Ensure that django-vaultkeeper-adaptor is installed in your production environment.

Ensure that your Django application knows where the file containing your secrets will be. In your, replace your existing way of populating DATABASES and BROKER_URL with the following code:
cfg = environ.get('CREDENTIAL_PATH','')

if cfg != '':
    vk_adaptor = vaultkeeper_adaptor.VKAdaptor(

django-vaultkeeper-adaptor will read the vaultkeeper-generated file containing application credentials and populate the supplied settings variables with values from the file, if they exist.

Note that CREDENTIAL_PATH in the above example is an environment variable set with the output location of vaultkeeper secrets. You can supply your application with this value in a different manner if you wish.

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for vaultkeeper-adaptor, version 0.0.1
Filename, size File type Python version Upload date Hashes
Filename, size vaultkeeper_adaptor-0.0.1-py2-none-any.whl (6.3 kB) File type Wheel Python version py2 Upload date Hashes View
Filename, size vaultkeeper_adaptor-0.0.1.tar.gz (3.4 kB) File type Source Python version None Upload date Hashes View

Supported by

Pingdom Pingdom Monitoring Google Google Object Storage and Download Analytics Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN DigiCert DigiCert EV certificate StatusPage StatusPage Status page