{"action":"created","comment":{"url":"https://api.github.com/repos/hashicorp/vault/pulls/comments/69298975","id":69298975,"diff_hunk":"@@ -0,0 +1,386 @@\n+---\n+layout: \"docs\"\n+page_title: \"Secret Backend: mongodb\"\n+sidebar_current: \"docs-secrets-mongodb\"\n+description: |-\n+  The mongodb secret backend for Vault generates database credentials to access MongoDB.\n+---\n+\n+# MongoDB Secret Backend\n+\n+Name: `mongodb`\n+\n+The `mongodb` secret backend for Vault generates MongoDB database credentials\n+dynamically based on configured roles. This means that services that need\n+to access a MongoDB database no longer need to hard-code credentials: they\n+can request them from Vault and use Vault's leasing mechanism to more easily\n+roll them.\n+\n+Additionally, it introduces a new ability: with every service accessing\n+the database with unique credentials, it makes auditing much easier when\n+questionable data access is discovered: you can track it down to the specific\n+instance of a service based on the MongoDB username.\n+\n+Vault makes use of its own internal revocation system to ensure that users\n+become invalid within a reasonable time of the lease expiring.\n+\n+This page will show a quick start for this backend. For detailed documentation\n+on every path, use `vault path-help` after mounting the backend.\n+\n+## Quick Start\n+\n+The first step to using the mongodb backend is to mount it.\n+Unlike the `generic` backend, the `mongodb` backend is not mounted by default.\n+\n+```\n+$ vault mount mongodb\n+Successfully mounted 'mongodb' at 'mongodb'!\n+```\n+\n+Next, we must tell Vault how to connect to MongoDB. This is done by providing\n+a standard connection string (URI):\n+\n+```\n+$ vault write mongodb/config/connection uri=\"mongodb://admin:Password!@mongodb.acme.com:27017/admin?ssl=true\"","path":"website/source/docs/secrets/mongodb/index.html.md","position":44,"original_position":44,"commit_id":"339aec975122aaf29fb9b3c6811f963ac95ad5ad","original_commit_id":"bbf0e277177e86650d51835fba1bbb23109eec1d","user":{"login":"jefferai","id":28627,"avatar_url":"https://avatars.githubusercontent.com/u/28627?v=3","gravatar_id":"","url":"https://api.github.com/users/jefferai","html_url":"https://github.com/jefferai","followers_url":"https://api.github.com/users/jefferai/followers","following_url":"https://api.github.com/users/jefferai/following{/other_user}","gists_url":"https://api.github.com/users/jefferai/gists{/gist_id}","starred_url":"https://api.github.com/users/jefferai/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jefferai/subscriptions","organizations_url":"https://api.github.com/users/jefferai/orgs","repos_url":"https://api.github.com/users/jefferai/repos","events_url":"https://api.github.com/users/jefferai/events{/privacy}","received_events_url":"https://api.github.com/users/jefferai/received_events","type":"User","site_admin":false},"body":"Not quite -- if the client is configured with `ssl=true` I would like connections to servers with `allowSSL` or `preferSSL` to fail if the final connection is not using SSL. But I don't think `mgo` makes this possible, sadly.","created_at":"2016-07-01T13:27:49Z","updated_at":"2016-07-01T13:27:49Z","html_url":"https://github.com/hashicorp/vault/pull/1414#discussion_r69298975","pull_request_url":"https://api.github.com/repos/hashicorp/vault/pulls/1414","_links":{"self":{"href":"https://api.github.com/repos/hashicorp/vault/pulls/comments/69298975"},"html":{"href":"https://github.com/hashicorp/vault/pull/1414#discussion_r69298975"},"pull_request":{"href":"https://api.github.com/repos/hashicorp/vault/pulls/1414"}}},"pull_request":{"url":"https://api.github.com/repos/hashicorp/vault/pulls/1414","id":70055817,"html_url":"https://github.com/hashicorp/vault/pull/1414","diff_url":"https://github.com/hashicorp/vault/pull/1414.diff","patch_url":"https://github.com/hashicorp/vault/pull/1414.patch","issue_url":"https://api.github.com/repos/hashicorp/vault/issues/1414","number":1414,"state":"open","locked":false,"title":"Add mongodb secret backend","user":{"login":"mhurne","id":677354,"avatar_url":"https://avatars.githubusercontent.com/u/677354?v=3","gravatar_id":"","url":"https://api.github.com/users/mhurne","html_url":"https://github.com/mhurne","followers_url":"https://api.github.com/users/mhurne/followers","following_url":"https://api.github.com/users/mhurne/following{/other_user}","gists_url":"https://api.github.com/users/mhurne/gists{/gist_id}","starred_url":"https://api.github.com/users/mhurne/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mhurne/subscriptions","organizations_url":"https://api.github.com/users/mhurne/orgs","repos_url":"https://api.github.com/users/mhurne/repos","events_url":"https://api.github.com/users/mhurne/events{/privacy}","received_events_url":"https://api.github.com/users/mhurne/received_events","type":"User","site_admin":false},"body":"Add mongodb secret backend, per #362.","created_at":"2016-05-13T20:46:35Z","updated_at":"2016-07-01T13:27:49Z","closed_at":null,"merged_at":null,"merge_commit_sha":"2753942100f0edcf740e58a7568135866f6952dc","assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/hashicorp/vault/milestones/10","html_url":"https://github.com/hashicorp/vault/milestones/0.6.1","labels_url":"https://api.github.com/repos/hashicorp/vault/milestones/10/labels","id":1760654,"number":10,"title":"0.6.1","description":null,"creator":{"login":"jefferai","id":28627,"avatar_url":"https://avatars.githubusercontent.com/u/28627?v=3","gravatar_id":"","url":"https://api.github.com/users/jefferai","html_url":"https://github.com/jefferai","followers_url":"https://api.github.com/users/jefferai/followers","following_url":"https://api.github.com/users/jefferai/following{/other_user}","gists_url":"https://api.github.com/users/jefferai/gists{/gist_id}","starred_url":"https://api.github.com/users/jefferai/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jefferai/subscriptions","organizations_url":"https://api.github.com/users/jefferai/orgs","repos_url":"https://api.github.com/users/jefferai/repos","events_url":"https://api.github.com/users/jefferai/events{/privacy}","received_events_url":"https://api.github.com/users/jefferai/received_events","type":"User","site_admin":false},"open_issues":18,"closed_issues":16,"state":"open","created_at":"2016-05-11T17:49:55Z","updated_at":"2016-06-30T20:45:34Z","due_on":null,"closed_at":null},"commits_url":"https://api.github.com/repos/hashicorp/vault/pulls/1414/commits","review_comments_url":"https://api.github.com/repos/hashicorp/vault/pulls/1414/comments","review_comment_url":"https://api.github.com/repos/hashicorp/vault/pulls/comments{/number}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/1414/comments","statuses_url":"https://api.github.com/repos/hashicorp/vault/statuses/339aec975122aaf29fb9b3c6811f963ac95ad5ad","head":{"label":"mhurne:mongodb-secret-backend","ref":"mongodb-secret-backend","sha":"339aec975122aaf29fb9b3c6811f963ac95ad5ad","user":{"login":"mhurne","id":677354,"avatar_url":"https://avatars.githubusercontent.com/u/677354?v=3","gravatar_id":"","url":"https://api.github.com/users/mhurne","html_url":"https://github.com/mhurne","followers_url":"https://api.github.com/users/mhurne/followers","following_url":"https://api.github.com/users/mhurne/following{/other_user}","gists_url":"https://api.github.com/users/mhurne/gists{/gist_id}","starred_url":"https://api.github.com/users/mhurne/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mhurne/subscriptions","organizations_url":"https://api.github.com/users/mhurne/orgs","repos_url":"https://api.github.com/users/mhurne/repos","events_url":"https://api.github.com/users/mhurne/events{/privacy}","received_events_url":"https://api.github.com/users/mhurne/received_events","type":"User","site_admin":false},"repo":{"id":38401220,"name":"vault","full_name":"mhurne/vault","owner":{"login":"mhurne","id":677354,"avatar_url":"https://avatars.githubusercontent.com/u/677354?v=3","gravatar_id":"","url":"https://api.github.com/users/mhurne","html_url":"https://github.com/mhurne","followers_url":"https://api.github.com/users/mhurne/followers","following_url":"https://api.github.com/users/mhurne/following{/other_user}","gists_url":"https://api.github.com/users/mhurne/gists{/gist_id}","starred_url":"https://api.github.com/users/mhurne/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mhurne/subscriptions","organizations_url":"https://api.github.com/users/mhurne/orgs","repos_url":"https://api.github.com/users/mhurne/repos","events_url":"https://api.github.com/users/mhurne/events{/privacy}","received_events_url":"https://api.github.com/users/mhurne/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/mhurne/vault","description":"A tool for managing secrets.","fork":true,"url":"https://api.github.com/repos/mhurne/vault","forks_url":"https://api.github.com/repos/mhurne/vault/forks","keys_url":"https://api.github.com/repos/mhurne/vault/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mhurne/vault/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mhurne/vault/teams","hooks_url":"https://api.github.com/repos/mhurne/vault/hooks","issue_events_url":"https://api.github.com/repos/mhurne/vault/issues/events{/number}","events_url":"https://api.github.com/repos/mhurne/vault/events","assignees_url":"https://api.github.com/repos/mhurne/vault/assignees{/user}","branches_url":"https://api.github.com/repos/mhurne/vault/branches{/branch}","tags_url":"https://api.github.com/repos/mhurne/vault/tags","blobs_url":"https://api.github.com/repos/mhurne/vault/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mhurne/vault/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mhurne/vault/git/refs{/sha}","trees_url":"https://api.github.com/repos/mhurne/vault/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mhurne/vault/statuses/{sha}","languages_url":"https://api.github.com/repos/mhurne/vault/languages","stargazers_url":"https://api.github.com/repos/mhurne/vault/stargazers","contributors_url":"https://api.github.com/repos/mhurne/vault/contributors","subscribers_url":"https://api.github.com/repos/mhurne/vault/subscribers","subscription_url":"https://api.github.com/repos/mhurne/vault/subscription","commits_url":"https://api.github.com/repos/mhurne/vault/commits{/sha}","git_commits_url":"https://api.github.com/repos/mhurne/vault/git/commits{/sha}","comments_url":"https://api.github.com/repos/mhurne/vault/comments{/number}","issue_comment_url":"https://api.github.com/repos/mhurne/vault/issues/comments{/number}","contents_url":"https://api.github.com/repos/mhurne/vault/contents/{+path}","compare_url":"https://api.github.com/repos/mhurne/vault/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mhurne/vault/merges","archive_url":"https://api.github.com/repos/mhurne/vault/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mhurne/vault/downloads","issues_url":"https://api.github.com/repos/mhurne/vault/issues{/number}","pulls_url":"https://api.github.com/repos/mhurne/vault/pulls{/number}","milestones_url":"https://api.github.com/repos/mhurne/vault/milestones{/number}","notifications_url":"https://api.github.com/repos/mhurne/vault/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mhurne/vault/labels{/name}","releases_url":"https://api.github.com/repos/mhurne/vault/releases{/id}","deployments_url":"https://api.github.com/repos/mhurne/vault/deployments","created_at":"2015-07-01T23:57:44Z","updated_at":"2016-03-25T21:00:19Z","pushed_at":"2016-07-01T13:14:07Z","git_url":"git://github.com/mhurne/vault.git","ssh_url":"git@github.com:mhurne/vault.git","clone_url":"https://github.com/mhurne/vault.git","svn_url":"https://github.com/mhurne/vault","homepage":"http://vaultproject.io","size":15942,"stargazers_count":3,"watchers_count":3,"language":"JavaScript","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":3,"default_branch":"master"}},"base":{"label":"hashicorp:master","ref":"master","sha":"5dc8394ad295c1d09ffc582a8142e8d4569b4a05","user":{"login":"hashicorp","id":761456,"avatar_url":"https://avatars.githubusercontent.com/u/761456?v=3","gravatar_id":"","url":"https://api.github.com/users/hashicorp","html_url":"https://github.com/hashicorp","followers_url":"https://api.github.com/users/hashicorp/followers","following_url":"https://api.github.com/users/hashicorp/following{/other_user}","gists_url":"https://api.github.com/users/hashicorp/gists{/gist_id}","starred_url":"https://api.github.com/users/hashicorp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hashicorp/subscriptions","organizations_url":"https://api.github.com/users/hashicorp/orgs","repos_url":"https://api.github.com/users/hashicorp/repos","events_url":"https://api.github.com/users/hashicorp/events{/privacy}","received_events_url":"https://api.github.com/users/hashicorp/received_events","type":"Organization","site_admin":false},"repo":{"id":31288958,"name":"vault","full_name":"hashicorp/vault","owner":{"login":"hashicorp","id":761456,"avatar_url":"https://avatars.githubusercontent.com/u/761456?v=3","gravatar_id":"","url":"https://api.github.com/users/hashicorp","html_url":"https://github.com/hashicorp","followers_url":"https://api.github.com/users/hashicorp/followers","following_url":"https://api.github.com/users/hashicorp/following{/other_user}","gists_url":"https://api.github.com/users/hashicorp/gists{/gist_id}","starred_url":"https://api.github.com/users/hashicorp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hashicorp/subscriptions","organizations_url":"https://api.github.com/users/hashicorp/orgs","repos_url":"https://api.github.com/users/hashicorp/repos","events_url":"https://api.github.com/users/hashicorp/events{/privacy}","received_events_url":"https://api.github.com/users/hashicorp/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/hashicorp/vault","description":"A tool for managing secrets.","fork":false,"url":"https://api.github.com/repos/hashicorp/vault","forks_url":"https://api.github.com/repos/hashicorp/vault/forks","keys_url":"https://api.github.com/repos/hashicorp/vault/keys{/key_id}","collaborators_url":"https://api.github.com/repos/hashicorp/vault/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/hashicorp/vault/teams","hooks_url":"https://api.github.com/repos/hashicorp/vault/hooks","issue_events_url":"https://api.github.com/repos/hashicorp/vault/issues/events{/number}","events_url":"https://api.github.com/repos/hashicorp/vault/events","assignees_url":"https://api.github.com/repos/hashicorp/vault/assignees{/user}","branches_url":"https://api.github.com/repos/hashicorp/vault/branches{/branch}","tags_url":"https://api.github.com/repos/hashicorp/vault/tags","blobs_url":"https://api.github.com/repos/hashicorp/vault/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/hashicorp/vault/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/hashicorp/vault/git/refs{/sha}","trees_url":"https://api.github.com/repos/hashicorp/vault/git/trees{/sha}","statuses_url":"https://api.github.com/repos/hashicorp/vault/statuses/{sha}","languages_url":"https://api.github.com/repos/hashicorp/vault/languages","stargazers_url":"https://api.github.com/repos/hashicorp/vault/stargazers","contributors_url":"https://api.github.com/repos/hashicorp/vault/contributors","subscribers_url":"https://api.github.com/repos/hashicorp/vault/subscribers","subscription_url":"https://api.github.com/repos/hashicorp/vault/subscription","commits_url":"https://api.github.com/repos/hashicorp/vault/commits{/sha}","git_commits_url":"https://api.github.com/repos/hashicorp/vault/git/commits{/sha}","comments_url":"https://api.github.com/repos/hashicorp/vault/comments{/number}","issue_comment_url":"https://api.github.com/repos/hashicorp/vault/issues/comments{/number}","contents_url":"https://api.github.com/repos/hashicorp/vault/contents/{+path}","compare_url":"https://api.github.com/repos/hashicorp/vault/compare/{base}...{head}","merges_url":"https://api.github.com/repos/hashicorp/vault/merges","archive_url":"https://api.github.com/repos/hashicorp/vault/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/hashicorp/vault/downloads","issues_url":"https://api.github.com/repos/hashicorp/vault/issues{/number}","pulls_url":"https://api.github.com/repos/hashicorp/vault/pulls{/number}","milestones_url":"https://api.github.com/repos/hashicorp/vault/milestones{/number}","notifications_url":"https://api.github.com/repos/hashicorp/vault/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/hashicorp/vault/labels{/name}","releases_url":"https://api.github.com/repos/hashicorp/vault/releases{/id}","deployments_url":"https://api.github.com/repos/hashicorp/vault/deployments","created_at":"2015-02-25T00:15:59Z","updated_at":"2016-07-01T13:01:05Z","pushed_at":"2016-07-01T13:14:08Z","git_url":"git://github.com/hashicorp/vault.git","ssh_url":"git@github.com:hashicorp/vault.git","clone_url":"https://github.com/hashicorp/vault.git","svn_url":"https://github.com/hashicorp/vault","homepage":"https://www.vaultproject.io/","size":17706,"stargazers_count":4880,"watchers_count":4880,"language":"JavaScript","has_issues":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":482,"mirror_url":null,"open_issues_count":163,"forks":482,"open_issues":163,"watchers":4880,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/hashicorp/vault/pulls/1414"},"html":{"href":"https://github.com/hashicorp/vault/pull/1414"},"issue":{"href":"https://api.github.com/repos/hashicorp/vault/issues/1414"},"comments":{"href":"https://api.github.com/repos/hashicorp/vault/issues/1414/comments"},"review_comments":{"href":"https://api.github.com/repos/hashicorp/vault/pulls/1414/comments"},"review_comment":{"href":"https://api.github.com/repos/hashicorp/vault/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/hashicorp/vault/pulls/1414/commits"},"statuses":{"href":"https://api.github.com/repos/hashicorp/vault/statuses/339aec975122aaf29fb9b3c6811f963ac95ad5ad"}}}}
{"actor":{"display_login":"jefferai"}}