Optional path prefix inserted between the KV data/metadata segment and the workspace id (e.g., "apps/windmill"). When set, secrets are stored at <mount>/data/<prefix>/<workspace>/<secret>, allowing a Vault policy scoped to exactly <mount>/data/<prefix>/*.
jwt_rolestring
Vault JWT auth role name for Windmill (optional, if not provided token auth is used)
jwt_mount_pathstring
Mount path for the JWT auth method in Vault (optional, defaults to "jwt"). Set this when the JWT auth method is mounted at a non-default path, e.g. via vault auth enable -path=<mount> jwt.
namespacestring
Vault Enterprise namespace (optional)
tokenstring
Static Vault token for testing/development (optional, if provided this is used instead of JWT authentication)
skip_ssl_verifyboolean
Skip TLS certificate verification when connecting to Vault. Only use for self-signed certificates in development environments.