diff --git a/infra/terraform/environments/dev/main.tf b/infra/terraform/environments/dev/main.tf
index b8943ba..8d7c74b 100644
--- a/infra/terraform/environments/dev/main.tf
+++ b/infra/terraform/environments/dev/main.tf
@@ -10,3 +10,19 @@ module "k3s" {
   k3s_disable_components = var.k3s_disable_components
   kubeconfig_output_path = var.kubeconfig_output_path
 }
+
+provider "vault" {
+  # Adresse du serveur Vault (dev)
+  address = "https://10.101.200.37:8200"
+
+  # Auth par userpass 
+  auth_login {
+    path = "auth/userpass/login/${var.vault_username}"
+    parameters = {
+      login    = var.vault_username
+      password = var.vault_password
+    }
+  }
+  # Skip verify pour dev uniquement (pas en prod!)
+  # skip_client_verification = true
+}
\ No newline at end of file
diff --git a/infra/terraform/environments/dev/variables.tf b/infra/terraform/environments/dev/variables.tf
index e6f20c2..16634ce 100644
--- a/infra/terraform/environments/dev/variables.tf
+++ b/infra/terraform/environments/dev/variables.tf
@@ -76,3 +76,15 @@ variable "deployment_environment" {
     error_message = "L'environnement doit être dev, rec ou prod."
   }
 }
+
+variable "vault_username" {
+  description = "Username Vault"
+  type        = string
+  sensitive   = false
+}
+
+variable "vault_password" {
+  description = "Password Vault"
+  type        = string
+  sensitive   = true
+}