Vault
General Patterns¶
| Article | Description |
|---|---|
| HashiCorp HashiCorp Developer | Docs, step by step tutorials, videos, and real hands-on labs |
| HashiCorp How to Choose a Data Protection Method |
 |
| HashiCorp How (and Why) to Use AppRole Correctly in HashiCorp Vault | Best and worst practices for using HashiCorp Vault's AppRole authentication method |
| HashiCorp Encryption with Transit Data Keys | How to use an external, high-entropy data key generated with the HashiCorp Vault Transit secrets engine |
| HashiCorp Vault Logging and Alerting on Day 1 | A step-by-step guide to building a free solution for Day 1 Vault logging and alerting on AWS |
| HashiCorp HashiCorp Vault observability: Monitoring Vault at scale | How to implement a mature Vault monitoring and observability strategy to simplify finding answers to important Vault questions |
Use Cases¶
| Article | Description |
|---|---|
| HashiCorp Managing SSH Access at Scale with HashiCorp Vault | How to build scalable, role-based SSH access with SSH certificates and Vault |
| Seamless Dynamic Credentials for Developers with HashiCorp Vault | How Sky Betting & Gaming helps its developers seamlessly grab dynamic credentials from HashiCorp Vault without having to specify which credentials they need |
| Seeding HashiCorp Vault With Terraform at Form3 | Talk explaining how the Form3 team created a repeatable process to automate the setup of Vault using Terraform |
Integrations¶
Kubernetes¶
| Article | Description |
|---|---|
| HashiCorp vault-secrets-operator |
|
| DEPRECATED HashiCorp HashiCorp Vault: Delivering Secrets with Kubernetes | An example of the HashiCorp Vault & Kubernetes sidecar injection integration method |
| DEPRECATED HashiCorp Kubernetes Vault Integration via Sidecar Agent Injector vs. CSI Provider | A detailed comparison of two HashiCorp-supported methods for HashiCorp Vault and Kubernetes integration |
| DEPRECATED HashiCorp Retrieve HashiCorp Vault Secrets with Kubernetes CSI | How to use CSI to expose secrets on a volume within a Kubernetes pod and retrieve them using the beta Vault Provider for the Kubernetes Secrets Store CSI Driver |
| DEPRECATED HashiCorp Why Use the Vault Agent for Secrets Management? |
|
| DEPRECATED HashiCorp Refresh Secrets for Kubernetes Applications with Vault Agent | System signal and live reload methods for updating Kubernetes applications when secrets change |
| 5 best practices to get to production readiness with Hashicorp Vault in Kubernetes | A list of architectural and technical recommendations from the Expel team to help reliably and securely deploy, run, and configure a Vault server in Kubernetes |
| How to setup secret management in Kubernetes with HashiCorp Vault | How to setup secret management in Kubernetes with HashiCorp Vault |
| How to Automate the Provisioning of Narrowly-Scoped and Short-Lived Pull Secrets | Post showcasing an approach aimed at automating the provisioning of narrowly-scoped and short-lived pull secrets within Kubernetes environments thanks to HashiCorp Vault |
Terraform¶
| Article | Description |
|---|---|
| HashiCorp Onboarding Applications to Vault Using Terraform: A Practical Guide | How to build an automated HashiCorp Vault onboarding system with Terraform using sensible naming standards, ACL policy templates, pre-created application entities, and workflows driven by VCS and CI/CD |
CSPs¶
| Article | Description |
|---|---|
| Use HashiCorp Vault AWS engine with multiple accounts | How the Vault secrets engine works and how to use it to dynamically create credentials across multiple AWS accounts using the assume_role feature |
| Monitor HashiCorp Vault Metrics and Logs | A deep dive into the key metrics and logs for monitoring the health and performance of HashiCorp Vault |