Structured inputs
Express supported onboarding parameters through CSV-defined data instead of one-off configuration.
The Lab
Ideas built into working foundations.
The Lab is where Lucier Labs develops and shares practical security engineering projects. Each begins with a recurring problem and explores a clearer, more repeatable way of working.
Active development
Vault Onboarding Framework
A Terraform-based foundation designed to support parameterized, self-service onboarding to HashiCorp Vault.
01Approved parametersCSV-defined inputs
→02TerraformRepeatable configuration
→03Vault foundationsIdentity trust + KV v2
Why it exists
Replace one-off onboarding with a governed path.
Vault onboarding can span identity trust, secrets paths, policy, and platform workflows. Repeating that work by hand can introduce inconsistency and make the process difficult to scale.
This project explores a configuration-driven approach in which platform teams define approved parameters and application teams follow a repeatable onboarding path.
Current foundations
- TerraformConfiguration as code
- HashiCorp VaultJWT auth + KV v2
- GitHub ActionsWorkload identity
- HCP TerraformWorkload identity
Federated automation
Establish JWT trust patterns for GitHub Actions and HCP Terraform without relying on long-lived static credentials.
Vault foundations
Provide Terraform foundations for repeatable KV v2 configuration and application secret paths.
Discuss the framework
Exploring repeatable Vault onboarding?
Talk with Lucier Labs about the project, its current scope, or the identity patterns behind it.