{"id":3159,"date":"2024-01-05T11:18:05","date_gmt":"2024-01-05T19:18:05","guid":{"rendered":"https:\/\/www.couchbase.com\/blog\/secure-db-credentials-with-hashicorp-vault-capella\/"},"modified":"2024-01-05T11:18:05","modified_gmt":"2024-01-05T19:18:05","slug":"secure-db-credentials-with-hashicorp-vault-capella","status":"publish","type":"post","link":"https:\/\/www.couchbase.com\/blog\/es\/secure-db-credentials-with-hashicorp-vault-capella\/","title":{"rendered":"Secure DB Credentials with HashiCorp Vault &amp; Capella"},"content":{"rendered":"\n<p><span>In today&#8217;s data-driven world, secure database credential management is a paramount concern for organizations of all sizes. As we strive to empower you with cutting-edge solutions, we are thrilled to announce the release of our HashiCorp Vault plugin for Capella database credential management.\u00a0<\/span><\/p>\n\n\n\n<p><span>Incorporating HashiCorp Vault into Capella offers a multifaceted approach to database security:<\/span><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span>One of the key advantages is external, centralized user management, where user identities and access permissions are managed in a unified and secure manner. This ensures that access to your databases is controlled, audited, and consistent across your organization.\u00a0<\/span><\/li>\n\n\n<li><span>Vault&#8217;s capabilities extend to credential usage auditing, providing detailed logs and insights into who accessed your databases, when, and for what purpose. This level of transparency is invaluable for compliance and security teams, enabling them to track data access and meet regulatory requirements effectively.\u00a0<\/span><\/li>\n\n\n<li><span>Vault&#8217;s automation shines through with automatic credential rotation and revocation, reducing the risk of unauthorized access due to stale or compromised credentials.\u00a0<\/span><\/li>\n\n\n<li><span>Finally, Vault enables the issuance of dynamic temporary credentials, granting users time-limited access to databases. This not only enhances security but also simplifies user management by reducing the need for long-term credentials. Together, these features transform how you manage database access, making it more secure, efficient, and compliant.<\/span><\/li>\n\n<\/ul>\n\n\n\n<p><span>This article serves as a guide to help you leverage the capabilities of our plugin effectively. We will walk you through the entire process, from setting up a local Docker container Vault to managing dynamic credentials effortlessly. By the end of this tutorial, you&#8217;ll be well-equipped to enhance your database security with ease.<\/span><\/p>\n\n\n\n<p><span>Let&#8217;s dive into the world of secure database credential management and unlock the potential of our HashiCorp Vault plugin for Capella<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Step 1: Preparations<\/span><\/h2>\n\n\n\n<p><span>Before diving into the details, it&#8217;s essential to lay the foundation. In this initial step, we&#8217;ll guide you through the essential preparations required to set the stage for seamless integration. From creating an API key to setting up a sandbox database and gathering crucial organizational details, these preparations ensure you have everything you need to complete the plugin setup.<\/span><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Create a Capella API Key<\/span><\/h3>\n\n\n\n<p><span>Begin by ensuring you have the necessary API keys. Navigate to your organization settings and head to the <\/span><a href=\"https:\/\/docs.couchbase.com\/cloud\/management-api-guide\/management-api-start.html#generate-management-api-keys\"><span>API Key section.<\/span><\/a><span> Here, generate a Version 4 key with the organization owner role. This key will be instrumental in our credential management process. The reason for the organization owner role is that we will rotate the root credential later on.<\/span><\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15206\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image3-1.gif\" alt=\"Create a Capella API Key\" width=\"900\" height=\"456\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Decode API Key Credentials<\/span><\/h3>\n\n\n\n<p><span>We will need to provide the Capella <em>ACCESS_KEY<\/em> and the <em>SECRET_KEY<\/em> when we configure the vault plugin. We will grab this from the API key we generated earlier.\u00a0<\/span><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span>Download the Key<\/span><\/li>\n\n\n<li><span>Click copy button twice at the end of the\u00a0 API Key Token field.\u00a0<\/span><\/li>\n\n<\/ul>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15207\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image14-1024x264-1.png\" alt=\"Decode API Key Credentials\" width=\"900\" height=\"232\"><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span>Decode it using base64<\/span><\/li>\n\n<\/ul>\n\n\n<p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]echo &#8220;paste your key here&#8221; | base64 &#8211;decode[\/crayon]<\/p>\n\n\n\n<p><span>The decoded key will have two values separated by a semicolon:<\/span><\/p>\n\n\n<p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n\n\n\n<p><span>The first one is your <em>ACCESS_KEY<\/em> and the second one is your <em>SECRET_KEY<\/em>. You will need this later when you configure the plugin.<\/span><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Set Up a Sandbox Database<\/span><\/h3>\n\n\n\n<p><span>To facilitate this demo, set up a sandbox database. This will serve as a safe environment for testing our plugin.<\/span><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Create a Bucket and Scope<\/span><\/h3>\n\n\n\n<p><span>We&#8217;ll also create a bucket <em>vault-bucket-1<\/em> and a scope <em>vault-bucket-1-scope-1<\/em> within our cluster, which will be used when creating dynamic credentials later on.<\/span><\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15208\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image12-1024x1004-1.png\" alt=\"Create a Bucket and Scope\" width=\"900\" height=\"882\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Gather Essential Information<\/span><\/h3>\n\n\n\n<p><span>For the plugin configuration, you&#8217;ll need your organization ID, project ID, and cluster ID. The easiest way to obtain these details is by copying them from the URL and saving them in a text file for reference.<\/span><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><b>oid<\/b><span> is your organization Id<\/span><\/li>\n\n\n<li><b>projectId<\/b><span> is your project id<\/span><\/li>\n\n\n<li><b>dbid<\/b><span> is your database id<\/span><\/li>\n\n<\/ul>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15209\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image10.gif\" alt=\"Gather Essential Information\" width=\"900\" height=\"434\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Step 2: Set up Vault<\/span><\/h2>\n\n\n\n<p><span>Now, let&#8217;s get started with the technical aspect. We have two options to run the demo.\u00a0<\/span><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><span>To run the demo, clone the repository and utilize the Dockerfile within it. This Dockerfile includes steps to compile the plugin from source.\u00a0<\/span><\/li>\n\n\n<li><span>Alternatively, download the binary version of the plugin from the releases page and use that in your Vault installation.<\/span><\/li>\n\n<\/ol>\n\n\n\n<p><span>I will provide instructions for both methods. Please choose the path that suits your needs and follow the corresponding steps. There is no need to execute both methods<\/span><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Option 1: Use the Dockerfile in the plugin repository<\/span><\/h3>\n\n\n\n<p><span>Begin by cloning our GitHub repository:<\/span><\/p>\n\n\n<p>[crayon nums=&#8221;false&#8221; lang=&#8221;sh&#8221; decode=&#8221;true&#8221;]git clone https:\/\/github.com\/couchbasecloud\/vault-plugin-database-couchbasecapella[\/crayon]<\/p>\n\n\n\n<p><span>This repository contains the plugin source code, we will need to build the plugin. For this demo we will be building a docker image using Hashicorp\u2019s vault image. The plugin will be built during the Docker image creation process. This method should only be used for demo purposes. Please follow the instructions from <\/span><a href=\"https:\/\/developer.hashicorp.com\/vault\/docs\/plugins#external-plugins\"><span>Hashicorp<\/span><\/a><span> on how to install the plugin and use it in your environment.<\/span><\/p>\n\n\n<p>[crayon nums=&#8221;false&#8221; lang=&#8221;sh&#8221; decode=&#8221;true&#8221;]cd vault-plugin-database-couchbasecapella<br \/>\ndocker build -t vault:with-cb-capella-plugin .[\/crayon]<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15210\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image15-1024x130-1.png\" alt=\"Use the Dockerfile in the plugin repository\" width=\"900\" height=\"114\"><\/p>\n\n\n\n<p><span>Now the image has been built, We&#8217;ll launch a Vault server in a Docker container, configured for development mode. This allows us to bypass certain security features for easier testing. The Vault server will listen on port 8200 and will be initialized with a root token set to <em>password<\/em>. We&#8217;ll also enable debug-level logging to capture detailed information during our tests.<\/span><\/p>\n\n\n<p>[crayon nums=&#8221;false&#8221; lang=&#8221;sh&#8221; decode=&#8221;true&#8221;]docker run &#8211;cap-add=IPC_LOCK &#8211;name=&#8221;couchbase_vault&#8221; &#8211;rm<br \/>\n\u00a0\u00a0\u00a0\u00a0-e VAULT_DEV_LISTEN_ADDRESS=0.0.0.0:8200<br \/>\n\u00a0\u00a0\u00a0\u00a0-e VAULT_ADDR=https:\/\/0.0.0.0:8200<br \/>\n\u00a0\u00a0\u00a0\u00a0-p 8200:8200<br \/>\n\u00a0\u00a0\u00a0\u00a0vault:with-cb-capella-plugin<br \/>\n         vault server -dev -dev-root-token-id=&#8221;password&#8221;<br \/>\n\u00a0\u00a0\u00a0\u00a0-log-level=debug -config=\/vault\/config\/config.json[\/crayon]<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15213\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image1-1024x452-1.png\" alt=\"Vault server will listen on port 8200\" width=\"900\" height=\"397\"><\/p>\n\n\n\n<p><span>Please proceed directly to Step 3, bypassing Option 2.<\/span><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Option 2: Download the plugin binary<\/span><\/h3>\n\n\n\n<p><span>Begin by downloading the plugin from the <\/span><a href=\"https:\/\/github.com\/couchbasecloud\/vault-plugin-database-couchbasecapella\/releases\"><span>releases page<\/span><\/a><span>. As of writing this article, the latest version is 1.0.0, and since I am running Linux, I will proceed with downloading <\/span><a href=\"https:\/\/github.com\/couchbasecloud\/vault-plugin-database-couchbasecapella\/releases\/download\/v1.0.0\/vault-plugin-database-couchbasecapella-1.0.0_linux_amd64.zip\"><span>the linux version<\/span><\/a><span>.\u00a0<\/span><\/p>\n\n\n\n<p><span>Ensure you download the version appropriate for your computer&#8217;s architecture.\u00a0<\/span><\/p>\n\n\n<p>[crayon nums=&#8221;false&#8221; wrap=&#8221;true&#8221; lang=&#8221;sh&#8221; decode=&#8221;true&#8221;]curl -L https:\/\/github.com\/couchbasecloud\/vault-plugin-database-couchbasecapella\/releases\/download\/v1.0.0\/vault-plugin-database-couchbasecapella-1.0.0_linux_amd64.zip&amp;nbsp; -o vault-plugin-database-couchbasecapella-1.0.0_linux_amd64.zip[\/crayon]<\/p>\n\n\n\n<p><span>As a security best practice, it&#8217;s important to validate the integrity of the file. Therefore, also download the checksums of the binaries, which can be found on the releases page.<\/span><\/p>\n\n\n<p>[crayon nums=&#8221;false&#8221; wrap=&#8221;true&#8221; lang=&#8221;sh&#8221; decode=&#8221;true&#8221;]curl -L https:\/\/github.com\/couchbasecloud\/vault-plugin-database-couchbasecapella\/releases\/download\/v1.0.0\/vault-plugin-database-couchbasecapella-1.0.0_checksums.txt -o vault-plugin-database-couchbasecapella-1.0.0_checksums.txt[\/crayon]<\/p>\n\n\n\n<p><span>Locate the checksum corresponding to the file you downloaded within the text file.<\/span><\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15211\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image2-1024x98-1.png\" alt=\"Locate the checksum\" width=\"900\" height=\"86\"><\/p>\n\n\n\n<p><span>Generate the checksum and validate the result<\/span><\/p>\n\n\n<p>[crayon nums=&#8221;false&#8221; wrap=&#8221;true&#8221; lang=&#8221;sh&#8221; decode=&#8221;true&#8221;]sha256sum vault-plugin-database-couchbasecapella-1.0.0_linux_amd64.zip[\/crayon]<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15212\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image8-1024x22-1.png\" alt=\"checksum comparison indicates a match\" width=\"900\" height=\"19\"><\/p>\n\n\n\n<p><span>The checksum comparison indicates a match, confirming that the file validation is successful.<\/span><\/p>\n\n\n\n<p><span>It is now secure to extract the contents of the zipfile and retrieve the vault plugin.\u00a0<\/span><\/p>\n\n\n<p>[crayon nums=&#8221;false&#8221; wrap=&#8221;true&#8221; lang=&#8221;sh&#8221; decode=&#8221;true&#8221;]unzip vault-plugin-database-couchbasecapella-1.0.0_linux_amd64.zip[\/crayon]<\/p>\n\n\n\n<p><span>At this point, the vault plugin binary should be in our folder. The final step is to generate the hash of this binary, which is necessary for registering the plugin with Vault later. It&#8217;s important to note that this hash is for the binary itself, not the zip file downloaded earlier.<\/span><\/p>\n\n\n<p>[crayon nums=&#8221;false&#8221; wrap=&#8221;true&#8221; lang=&#8221;sh&#8221; decode=&#8221;true&#8221;]shasum -a 256 &#8220;couchbasecapella-database-plugin&#8221; | cut -d &#8221; &#8221; -f1 &gt; couchbasecapella-database-plugin.sha256[\/crayon]<\/p>\n\n\n\n<p><span>Executing this command should have resulted in the creation of a new file containing the hash of the vault plugin.<\/span><\/p>\n\n\n\n<p><span>We will also need to create a vault configuration that defines where the plugin resides.<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n0<\/p>\n\n\n\n<p><span>\u00a0<\/span><span>The final step involves creating a custom password policy that mirrors the policy used in Capella.<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n1<\/p>\n\n\n\n<p><span>Having downloaded the vault plugin and generated its hash, we will now initiate a Vault server in a Docker container, configured in development mode. This setup enables us to circumvent some security features for simplified testing purposes.\u00a0<\/span><\/p>\n\n\n\n<p><span>The Vault server will listen on port 8200 and will be initialized with a root token set to <em>password<\/em>. We&#8217;ll also enable debug-level logging to capture detailed information during our tests. It is also important to note that we will need to mount our plugin and sha as a volume:<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n2<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15213\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image1-1024x452-1.png\" alt=\"Vault server will listen on port 8200\" width=\"900\" height=\"397\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Step 3: Enable Database Secrets<\/span><\/h3>\n\n\n\n<p><span>Vault is now up and running in development mode. Next We&#8217;ll enable Vault&#8217;s database secrets engine. This engine allows Vault to generate dynamic credentials for databases, and it&#8217;s crucial for our plugin to function correctly. By enabling this, we&#8217;re setting the stage for Vault to manage our Capella database credentials. Open up a new terminal and run the following:<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n3<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15214\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image9-1024x413-1.png\" alt=\"Enable Database Secrets\" width=\"900\" height=\"363\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Step 4: Register the Plugin<\/span><\/h3>\n\n\n\n<p><span>We&#8217;ll register our custom plugin with Vault. This involves calculating the SHA-256 hash of the plugin binary to ensure its integrity. Vault uses this hash to verify that the plugin hasn&#8217;t been tampered with when it&#8217;s invoked. Once the hash is calculated, we&#8217;ll use it to register the plugin.<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n4<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15217\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image6-1024x287-1.png\" alt=\"Register the Plugin\" width=\"900\" height=\"252\"><\/p>\n\n\n\n<p><span>Now the plugin has been successfully registered.<\/span><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Step 5: Upload Password Policy<\/span><\/h3>\n\n\n\n<p><span>We&#8217;ll upload a password policy to Vault that aligns with Capella&#8217;s password requirements. This ensures that any credentials generated by Vault for Capella will comply with Capella&#8217;s security standards. The policy will be defined in a HashiCorp Configuration Language (HCL) file. This file was added to the Docker image during the build.<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n5<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15215 size-large\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image13-1024x401-1.png\" alt=\"Upload Password Policy\" width=\"900\" height=\"352\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Step 6: Create Database Config<\/span><\/h3>\n\n\n\n<p><span>We&#8217;ll configure Vault to connect to our Capella cluster. This involves specifying various parameters like the base URL for Capella&#8217;s cloud API, organization ID, project ID, and cluster ID. We&#8217;ll also provide the Capella access key we generated earlier. This configuration allows Vault to interact with our Capella cluster and manage credentials dynamically.\u00a0<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n6<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15216 size-large\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image11-1024x257-1.png\" alt=\"Create Database Config\" width=\"900\" height=\"226\"><\/p>\n\n\n\n<p><span>Now the Capella plugin is configured and able to talk to Capella.\u00a0<\/span><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Step 7: Rotate Root Credentials<\/span><\/h3>\n\n\n\n<p><span>We&#8217;ll perform a security best practice by rotating the high-privilege root credentials that Vault uses to manage the Capella database. This minimizes the risk associated with any potential exposure of these credentials.<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n7<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15218\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image16-1024x37-1.png\" alt=\"Rotate Root Credentials\" width=\"900\" height=\"33\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Step 8: Create a Dynamic Role<\/span><\/h3>\n\n\n\n<p><span>Next We&#8217;ll define a dynamic role in Vault. This role will have a set of permissions, defined in JSON format, that specify what kind of database operations are allowed. For example, we&#8217;ll grant <em>data_reader<\/em> and <em>data_writer<\/em> privileges on a specific bucket and scope in our Capella cluster. This dynamic role will be used to generate credentials with these permissions.<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n8<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15219\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image4-1024x59-1.png\" alt=\"Create a dynamic role\" width=\"900\" height=\"52\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Step 9: Create New Credentials<\/span><\/h3>\n\n\n\n<p><span>Finally, we&#8217;ll generate a new set of database credentials using the dynamic role we created. These credentials are temporary and will adhere to the TTL (Time-To-Live) settings we&#8217;ve configured. This is the culmination of our setup, demonstrating how Vault can dynamically manage Capella database credentials.<\/span><\/p>\n\n\n\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]HLkOuJult1wb11S2eBBm2C2H0Bm1tHVe:d%1VRg34zdrOeSwgLljG0RGnJPxqeFecK#gfhVCyC%mwZ3gTf1wjJjO4vwPcRpRT[\/crayon]<\/p>\n9<\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15221\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image17-1024x220-1.png\" alt=\"create new credentials\" width=\"900\" height=\"193\"><\/p>\n\n\n\n<p><span>Let\u2019s go back to Capella to check if our credentials in fact show in the UI as well.<\/span><\/p>\n\n\n\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-15220\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image5-2.gif\" alt=\"manage Capella database credentials\" width=\"900\" height=\"435\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Conclusion<\/span><\/h2>\n\n\n\n<p><span>In conclusion, our HashiCorp Vault plugin for Capella&#8217;s database credential management opens new horizons in enhancing the security of your database infrastructure. Through this step-by-step tutorial, you&#8217;ve gained valuable insights into setting up and utilizing the plugin effectively.<\/span><\/p>\n\n\n\n<p><span>By embracing this solution, you&#8217;re simplifying the process of managing database credentials. We encourage you to explore the full potential of our plugin and look forward to your experiences and feedback.<\/span><\/p>\n\n\n\n<p><span>Secure, efficient, and user-friendly database credential management is now at your fingertips. Take the first step towards a more secure database environment today!<\/span><\/p>\n\n\n\n<p>If you\u2019re interested in learning more about how you can build your own mission-critical modern applications on Couchbase, try our\u00a0<a href=\"https:\/\/cloud.couchbase.com\/sign-up\">30 day free trial of Couchbase Capella<\/a>. And to see more of what our customers are doing with Couchbase, check out our\u00a0<a href=\"https:\/\/www.couchbase.com\/customers\/\">customer case study page<\/a>!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In today&#8217;s data-driven world, secure database credential management is a paramount concern for organizations of all sizes. As we strive to empower you with cutting-edge solutions, we are thrilled to announce the release of our HashiCorp Vault plugin for Capella database credential management.\u00a0 Incorporating HashiCorp Vault into Capella offers a multifaceted approach to database security: [&hellip;]<\/p>\n","protected":false},"author":84313,"featured_media":3156,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[301,94],"tags":[685,6],"ppma_author":[651],"class_list":["post-3159","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud","category-security","tag-hashicorp-vault","tag-nosql-database"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.6 (Yoast SEO v27.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Secure DB Credentials with HashiCorp Vault &amp; Capella - The Couchbase Blog<\/title>\n<meta name=\"description\" content=\"Boost Capella database security using our HashiCorp Vault plugin. Follow our guide to set up Vault, handle dynamic credentials &amp; manage them externally.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.couchbase.com\/blog\/es\/secure-db-credentials-with-hashicorp-vault-capella\/\" \/>\n<meta property=\"og:locale\" content=\"es_MX\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Secure DB Credentials with HashiCorp Vault &amp; Capella\" \/>\n<meta property=\"og:description\" content=\"Boost Capella database security using our HashiCorp Vault plugin. Follow our guide to set up Vault, handle dynamic credentials &amp; manage them externally.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.couchbase.com\/blog\/es\/secure-db-credentials-with-hashicorp-vault-capella\/\" \/>\n<meta property=\"og:site_name\" content=\"The Couchbase Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-05T19:18:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image7-4.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1792\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Istvan Orban, Principal Product Manager\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Istvan Orban, Principal Product Manager\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/\"},\"author\":{\"name\":\"Istvan Orban, Principal Product Manager\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/person\\\/da80693db66ef61daaabe98bc56afc26\"},\"headline\":\"Secure DB Credentials with HashiCorp Vault &amp; Capella\",\"datePublished\":\"2024-01-05T19:18:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/\"},\"wordCount\":2229,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/image7-4.png\",\"keywords\":[\"hashicorp vault\",\"NoSQL Database\"],\"articleSection\":[\"Couchbase Capella\",\"Security\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/\",\"name\":\"Secure DB Credentials with HashiCorp Vault &amp; Capella - The Couchbase Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/image7-4.png\",\"datePublished\":\"2024-01-05T19:18:05+00:00\",\"description\":\"Boost Capella database security using our HashiCorp Vault plugin. Follow our guide to set up Vault, handle dynamic credentials & manage them externally.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/image7-4.png\",\"contentUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/image7-4.png\",\"width\":1792,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/secure-db-credentials-with-hashicorp-vault-capella\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Secure DB Credentials with HashiCorp Vault &amp; Capella\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\",\"name\":\"The Couchbase Blog\",\"description\":\"Couchbase, the NoSQL Database\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\",\"name\":\"The Couchbase Blog\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/06\\\/logo.svg\",\"contentUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/06\\\/logo.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"The Couchbase Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/person\\\/da80693db66ef61daaabe98bc56afc26\",\"name\":\"Istvan Orban, Principal Product Manager\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g1f058fdc7ceeed323cb0993693c690e0\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g\",\"caption\":\"Istvan Orban, Principal Product Manager\"},\"description\":\"Istvan Orban is the Principal Product Manager for Couchbase and lives in the United Kingdom. Istvan has a wide range of experience as a Full stack Software Engineer, Team leader and Devops Engineer. His main focus is security and Single Sign On. Istvan has led several large scale projects of his 20 year professional career.\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/es\\\/author\\\/istvanorban\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Secure DB Credentials with HashiCorp Vault &amp; Capella - The Couchbase Blog","description":"Boost Capella database security using our HashiCorp Vault plugin. Follow our guide to set up Vault, handle dynamic credentials & manage them externally.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.couchbase.com\/blog\/es\/secure-db-credentials-with-hashicorp-vault-capella\/","og_locale":"es_MX","og_type":"article","og_title":"Secure DB Credentials with HashiCorp Vault &amp; Capella","og_description":"Boost Capella database security using our HashiCorp Vault plugin. Follow our guide to set up Vault, handle dynamic credentials & manage them externally.","og_url":"https:\/\/www.couchbase.com\/blog\/es\/secure-db-credentials-with-hashicorp-vault-capella\/","og_site_name":"The Couchbase Blog","article_published_time":"2024-01-05T19:18:05+00:00","og_image":[{"width":1792,"height":1024,"url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image7-4.png","type":"image\/png"}],"author":"Istvan Orban, Principal Product Manager","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Istvan Orban, Principal Product Manager","Est. reading time":"12 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/#article","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/"},"author":{"name":"Istvan Orban, Principal Product Manager","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/da80693db66ef61daaabe98bc56afc26"},"headline":"Secure DB Credentials with HashiCorp Vault &amp; Capella","datePublished":"2024-01-05T19:18:05+00:00","mainEntityOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/"},"wordCount":2229,"commentCount":0,"publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image7-4.png","keywords":["hashicorp vault","NoSQL Database"],"articleSection":["Couchbase Capella","Security"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/","url":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/","name":"Secure DB Credentials with HashiCorp Vault &amp; Capella - The Couchbase Blog","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/#primaryimage"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image7-4.png","datePublished":"2024-01-05T19:18:05+00:00","description":"Boost Capella database security using our HashiCorp Vault plugin. Follow our guide to set up Vault, handle dynamic credentials & manage them externally.","breadcrumb":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/#primaryimage","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image7-4.png","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image7-4.png","width":1792,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/www.couchbase.com\/blog\/pt\/secure-db-credentials-with-hashicorp-vault-capella\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.couchbase.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Secure DB Credentials with HashiCorp Vault &amp; Capella"}]},{"@type":"WebSite","@id":"https:\/\/www.couchbase.com\/blog\/#website","url":"https:\/\/www.couchbase.com\/blog\/","name":"The Couchbase Blog","description":"Couchbase, the NoSQL Database","publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.couchbase.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.couchbase.com\/blog\/#organization","name":"The Couchbase Blog","url":"https:\/\/www.couchbase.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/06\/logo.svg","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/06\/logo.svg","width":"1024","height":"1024","caption":"The Couchbase Blog"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/da80693db66ef61daaabe98bc56afc26","name":"Istvan Orban, Principal Product Manager","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g1f058fdc7ceeed323cb0993693c690e0","url":"https:\/\/secure.gravatar.com\/avatar\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g","caption":"Istvan Orban, Principal Product Manager"},"description":"Istvan Orban is the Principal Product Manager for Couchbase and lives in the United Kingdom. Istvan has a wide range of experience as a Full stack Software Engineer, Team leader and Devops Engineer. His main focus is security and Single Sign On. Istvan has led several large scale projects of his 20 year professional career.","url":"https:\/\/www.couchbase.com\/blog\/es\/author\/istvanorban\/"}]}},"acf":[],"authors":[{"term_id":651,"user_id":84313,"is_guest":0,"slug":"istvanorban","display_name":"Istvan Orban, Principal Product Manager","avatar_url":{"url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image_2023-04-25_205027722-17.png","url2x":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image_2023-04-25_205027722-17.png"},"0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/posts\/3159","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/users\/84313"}],"replies":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/comments?post=3159"}],"version-history":[{"count":0,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/posts\/3159\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/media\/3156"}],"wp:attachment":[{"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/media?parent=3159"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/categories?post=3159"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/tags?post=3159"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/ppma_author?post=3159"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}