Vault

Manage cryptographic keys, TLS certificates, image-pull registries, and encrypted credentials as versioned, org-scoped resources.

8 articles

• What is the Vault?

  The Bahriya Vault stores cryptographic keys, TLS certificates, registries, and encrypted credentials, versioned and attached per project.

  2 min

• TLS Bundles

  TLS bundles store a CA certificate, server certificate, and private key in the Bahriya vault, mounted into containers for HTTPS, mTLS, and internal TLS.

  2 min

• X.509 Certificates

  X.509 certificates store a single PEM-encoded certificate in the Bahriya vault, delivered to containers as an exact file with versioned rotation.

  2 min

• GPG Keypairs

  GPG keypairs store ASCII-armoured public and private keys in the Bahriya vault, mounted into containers as files with versioned rotation and rollback.

  2 min

• SSH Keypairs

  SSH keypairs store a public key and PEM-encoded private key in the Bahriya vault, mounted into containers as files with versioned rotation and rollback.

  2 min

• Encryption Keys

  Encryption keys store symmetric key material in the Bahriya vault, delivered to containers as a single file, with versioned rotation and rollback.

  2 min

• Registries

  Registries store the credentials Bahriya uses to pull container images from private OCI registries like Docker Hub, GHCR, GitLab, ECR, or Harbor.

  3 min

• Secrets

  Secrets store sensitive values like database passwords and API keys, encrypted at rest and injected into Bahriya containers as environment variables.

  4 min