Vault creates two default policies; root, and default.

The root policy cannot be deleted or modified.

The default policy is attached to all tokens, by default, however, this action can be modified if needed.

In order to renew a token, a user can issue a vault token renew command to extend the TTL. The token can also be renewed using the API

The /sys/leader endpoint is used to check the current leader of Vault as well as high availability status.

You can use modules from a private registry, like the one provided by Terraform Cloud. Private registry modules have source strings of the form < HOSTNAME > / < NAMESPACE > / < NAME > / < PROVIDER > . This is the same format as the public registry, but with an added hostname prefix.

The prefix -/+ means that Terraform will destroy and recreate the resource, rather than updating it in-place. Some attributes and resources can be updated in-place and are shown with the ~ prefix.

After authenticating, a client is issued a security token which is associated with a policy. That token is used to make a subsequent request to Vault, such as read, write, etc.

Terraform destroy will always prompt for confirmation before executing unless passed the -auto-approve flag.

$ terraform destroy

Do you really want to destroy all resources?

Terraform will destroy all your managed infrastructure, as shown above.

There is no undo. Only ' yes ' will be accepted to confirm.

Enter a value:

Provisioners are used to execute scripts on a local or remote machine as part of resource creation or destruction. Provisioners can be used to bootstrap a resource, cleanup before destroy, run configuration management, etc. Even if the functionality you need is not available in a provider today, HashiCorp suggests that you consider local-exec usage as a temporary workaround and to open an issue in the relevant provider ' s repo to discuss adding first-class support.

Vault Agent is a client daemon that provides the following features:

- Auto-Auth

- Caching

- Templating

Reference link:- https://www.vaultproject.io/docs/agent

After initializing, Vault provides the root token to the user, this is the only way to log in to Vault to configure additional auth methods.