HCP Vault Secrets End of Life

32 AmazingTurtle 14 6/20/2025, 3:47:21 PM support.hashicorp.com ↗

Comments (14)

st3fan · 6m ago
Third alternative that HCE doesn't mention ...

https://openbao.org/

:-)

stackskipton · 2h ago
For anyone pondering a migration to something on premise, there is also Vault Fork called OpenBao(https://openbao.org/) similar to fork OpenToFu is of terraform.
zorgmonkey · 2h ago
I haven't tried it out, but it looks they recently added PKCS#11 which should make it possible to use it with devices like HSMs and cloud KMS solutions.
tekla · 2h ago
You can run Vault on prem
stackskipton · 54m ago
You can but assuming you are not paying for it, Hashicorp seems extremely hostile to community edition users.
tekla · 50m ago
How. I run it on prem and have no particular issues.
baobun · 39m ago
As of ~last year they changed the support and release cycles for Vault/Consul/Nomad so that security and bug fixes are only released for the latest minor versions outside of Enterprise. Every community release is deprecated the moment a new one is released and there are no backports or LTS.

This means that since then you are frequently faced with the choices of 1) keep up with the latest version, facing frequent regressions and occasional breakeage depending on what functionality you depend on 2) stay behind on versions with known bugs for a while after each minor release 3) build your own fork allowing you to pull in patches as necessary

redwood · 4h ago
For those of us for the removed can someone explain the difference between Vault Secrets and Vault Dedicated? (very naively I would have thought that Vault itself os specifically about secrets so I must be missing the nuance)
firesteelrain · 3h ago
HCP Vault Secrets aka Easy Vault aka Vault Lite is only for secrets. It’s also Cloud hosted.

Vault Community is more full featured. Vault Enterprise has HSM support (for auto unseal and seal wrapping) and FIPS 140-2 for those type of customers.

We use Vault Enterprise on prem solely for its particular HSM integration.