how do i configure hashicorp vault as a secrets manager in the helm chart?

To configure Hashicorp Vault as a secrets manager in the Helm chart, you need to set the

SECRET_PERSISTENCE

environment variable to

VAULT

. This is done in the Airbyte configuration. Here are the environment variables you need to set: 1.

SECRET_PERSISTENCE

- Set this to

VAULT

to use Hashicorp Vault. 2.

VAULT_ADDRESS

- Defines the vault address to read/write Airbyte Configuration to Hashicorp Vault. 3.

VAULT_PREFIX

- Defines the vault path prefix. Empty by default. 4.

VAULT_AUTH_TOKEN

- The token used for vault authentication. 5.

VAULT_AUTH_METHOD

- How vault will perform authentication. Currently, only supports Token auth. Defaults to token. Please note that this feature is still in Alpha support, and undefined behavior may result if this is turned on and then off. You can find more details in the [Airbyte documentation](https://docs.airbyte.com/operator-guides/configuring-airbyte#secrets). If you are facing SSL exceptions when connecting to Vault, you might need to create a configmap from the required SSL cert which is needed to connect to your vault URL, and mount it to

/etc/ssl/certs/

on both the airbyte-server and airbyte-worker. You can find more details on this in the [Github issue](https://github.com/airbytehq/airbyte/issues/22065).