---
title: "Update Hashicorp Vault Config"
method: POST
path: "/config_overrides/hashicorp_vault"
tags: ["config_overrides"]
---

# Update Hashicorp Vault Config

`POST /config_overrides/hashicorp_vault`

## Request

- Base URL: `https://api.sea-lion.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sea-lion.ai/config_overrides/hashicorp_vault`
- Auth: API key in header `x-litellm-api-key`

Update Hashicorp Vault secret manager configuration.
Sets environment variables, encrypts sensitive fields, and stores in DB.
Reinitializes the secret manager on this pod.

## Headers

- `litellm-changed-by` string, nullable: The litellm-changed-by header enables tracking of actions performed by authorized users on behalf of other users, providing an audit trail for accountability

## Request body

- HashicorpVaultConfig: Configuration for Hashicorp Vault secret manager integration.
  - `approle_mount_path` string, nullable: Mount path for the AppRole auth method (default: approle)
  - `approle_role_id` string, nullable: Role ID for Vault AppRole authentication
  - `approle_secret_id` string, nullable: Secret ID for Vault AppRole authentication
  - `client_cert` string, nullable: Path to the client TLS certificate for Vault
  - `client_key` string, nullable: Path to the client TLS private key for Vault
  - `vault_addr` string, nullable: The address of the Vault server (e.g., https://vault.example.com:8200)
  - `vault_cert_role` string, nullable: Certificate role name for TLS cert authentication
  - `vault_login_namespace` string, nullable: Namespace for AppRole and TLS cert login (X-Vault-Namespace header); falls back to vault_namespace
  - `vault_mount_name` string, nullable: KV engine mount name (default: secret)
  - `vault_namespace` string, nullable: Vault namespace used for both login and secret operations unless overridden below
  - `vault_path_prefix` string, nullable: Optional path prefix for secrets (e.g., myapp -> secret/data/myapp/{secret_name})
  - `vault_secret_namespace` string, nullable: Namespace for secret reads and writes (URL path segment); falls back to vault_namespace
  - `vault_token` string, nullable: Token for Vault token-based authentication

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-21** `f2fb14eab3f5`: 7 info
  - api tag `config_overrides` added
  - api tag `Config Overrides` removed
  - added the new optional `header` request parameter `litellm-changed-by`
  - added the new optional request property `vault_login_namespace`
  - …3 more

[Operation history](https://skmtc.dev/sea-lion/apis/litellm-api/changes/config_overrides/hashicorp_vault/post.md)

---

[API](https://skmtc.dev/sea-lion/apis/litellm-api.md) · [All operations](https://skmtc.dev/sea-lion/apis/litellm-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sea-lion/apis/litellm-api/revisions/f2fb14eab3f5?raw)