@storm-trade/load-vault-secrets

Load HashiCorp Vault KV v2 secrets into process.env using Kubernetes auth.

Usage

import { loadVaultSecrets } from '@storm-trade/load-vault-secrets';

await loadVaultSecrets({
  jwtTokenMountPath: '/var/run/secrets/kubernetes.io/serviceaccount/token',
  vaultEndpoint: 'https://vault.example.com',
  appRole: 'my-app',
  secretsPath: 'secret/data/my-app/config',
});

// Multiple paths (later paths override keys from earlier ones)
await loadVaultSecrets({
  jwtTokenMountPath: '/var/run/secrets/kubernetes.io/serviceaccount/token',
  vaultEndpoint: 'https://vault.example.com',
  appRole: 'my-app',
  secretsPath: [
    'secret/data/my-app/shared',
    'secret/data/my-app/config',
  ],
});

Requires Node.js 18+.