# XtraDB + HashiCorp Vault integration **URL:** \ **Category:** Percona Operator for MySQL\ **Tags:** mysql, percona\ **Created:** [November 26, 2021, 9:33am UTC](https://forums.percona.com/t/xtradb-hashicorp-vault-integration/13235 "2021-11-26T09:33:26Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![katajistok](https://avatars.discourse-cdn.com/v4/letter/k/9f8e36/32.png) [@katajistok](https://forums.percona.com/u/katajistok)\ **Post date:** [November 26, 2021, 9:33am UTC](https://forums.percona.com/t/xtradb-hashicorp-vault-integration/13235/1 "2021-11-26T09:33:26Z")
Hello, There is a fine instruction how to enable encryption at rest: [Data at Rest Encryption](https://www.percona.com/doc/kubernetes-operator-for-pxc/encryption.html). I have tested this and it seems to work just fine. What are you recommendations to protect secrets used in deployment? Is there a way to use basic authentication on “encryption at rest” setup towards Vault? ---
**Author:** ![Sergey\_Pronin](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/sergey_pronin/32/14887_2.png) [@Sergey\_Pronin](https://forums.percona.com/u/Sergey_Pronin)\ **Post date:** [November 29, 2021, 1:56pm UTC](https://forums.percona.com/t/xtradb-hashicorp-vault-integration/13235/2 "2021-11-29T13:56:05Z")
Hey @katajistok , I’m not sure what are you asking. Could you pls go into the details? ---
**Author:** ![katajistok](https://avatars.discourse-cdn.com/v4/letter/k/9f8e36/32.png) [@katajistok](https://forums.percona.com/u/katajistok)\ **Post date:** [November 29, 2021, 2:38pm UTC](https://forums.percona.com/t/xtradb-hashicorp-vault-integration/13235/3 "2021-11-29T14:38:11Z")
Hello, Encryption at rest. In this case there is policy that only basic authentication to Vault is approved. So is it possible to use basic auth on encryption at rest? For the other things we have let’s se a good solution now.