Paul Done pkdone

## vault-atlas-api-key-secrets-example.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                pkdone
                / vault-atlas-api-key-secrets-example.md
            
            
              Last active
              April 24, 2022 08:31
            
          
    Hashicorp Vault Secrets For MongoDB Atlas Programmatic Admin API Keys Creation

Assumptions


You have a MongoDB Atlas project already created and you have made a note of its project/group ID
You have already created an Atlas org-level Admin API key which has an Access List configured to be accessible from your workstation and you have made a note of its public and private key values
You have Hashicorp Vault installed

Start Vault in Development Mode


## mongodb-enc-at-rest-example-kmip.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                pkdone
                / mongodb-enc-at-rest-example-kmip.md
            
            
              Last active
              April 20, 2022 18:42
            
          
    MongoDB Encryption-at-Rest Using KMIP

Assumptions


You have MongoDB Enterprise installed (but not configured or running) on your local workstation with the mongod binary and the other MongoDB binaries on your system path
You have the modern MongoDB Shell (mongosh) installed locally on your workstation
You have a KMIP Server running and accessible (for an example of running and configuring a Hashicorp Vault development instance, see: Hashicorp Vault Configuration For MongoDB KMIP Use)

Create a Shell Script to Start an Encrypted Replica Set and Launch It


## hashicorp-vault-config-for-mongodb-kmip.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              1 star
            
          
                pkdone
                / hashicorp-vault-config-for-mongodb-kmip.md
            
            
              Last active
              September 11, 2023 22:58
            
          
    Hashicorp Vault Configuration For MongoDB KMIP Use

Assumptions

You have Hashicorp Vault enterprise version installed, which supports KMIP (the open-source version of Vault does not support KMIP).
Start Vault in Development Mode

From a terminal, execute the code below after first changing the variable VAULT_LICENSE_PATH to reference the location of your downloaded Hashicorp Vault enterprise licence:

  
## mongodb-csfle-example-kmip-or-local-key.md

      
              1 file
            
          
              1 fork
            
          
              0 comments
            
          
              4 stars
            
          
                pkdone
                / mongodb-csfle-example-kmip-or-local-key.md
            
            
              Last active
              July 6, 2023 03:52
            
          
    MongoDB Client-Side Field Level Encryption (CSFLE) Using KMIP or Local Master Key (with mongosh)

Assumptions


You have a MongoDB Enterprise deployment already running and accessible (self-managed or in Atlas)
You have the MongoDB Enterprise binary mongocryptd accessibe on your system path to enable automated encryption
You have the modern MongoDB Shell (mongosh) installed locally on your workstation
You have a KMIP Server running and accessible, if you don't intend to use a local keyfile (for an example of running and configuring a Hashicorp Vault development instance, see: Hashicorp Vault Configuration For MongoDB KMIP Use)

Configure Local Workstation Context Files