Back to Integrations

Vault

Reference HashiCorp Vault secrets in env zero so values are resolved at deploy time

Integration
category

Secret Management

Overview

env zero can pull secrets from HashiCorp Vault during deployment instead of storing them itself. Reference a secret with a simple placeholder and env zero resolves it at runtime, so sensitive values stay in Vault rather than on the platform.

How it works

With a self-hosted agent that can reach your Vault, reference secrets using a placeholder in your variables. env zero resolves each one only while a deployment runs, so the actual values never live in env zero's storage.