Using Hashicorp Vault in Kubernetes Clusters
summary
Shows exact commands and outcomes: enabling KV v2 and creating secrets with vault kv put then vault kv get, enabling kubernetes auth and writing a role that is bound to a service account, patching a deployment with annotations so the agent injector sidecar places secrets into the pod, and verifying the demo container runs and reads the secret. Mentions CRDs, CSI injection, token renewal behavior, and a CI/CD flow using sealed-secrets + Argo CD so secrets land in Vault and are injected at deploy time.
AI-written summary · about
chapters (9)
- 0:00Managing secrets in Kubernetes
- 1:16Sensitive resources in Kubernetes
- 3:08HashiCorp Vault features
- 3:49Vault’s architecture deep dive
- 9:12Vault integration with Kubernetes
- 15:02Vault and Kubernetes scenarios
- 16:26Demo: Injecting secrets into pod
- 21:35Vault in CI/CD pipelines
- 22:36Summary
related talks
49mManaging Secrets in a Kubernetes Cluster with Hashicorp Vault
49mUsing HashiCorp Vault with Kubernetes
25mCan you keep a secret?
20mEvolving Kubernetes security with Vault and OpenShift
42mDynamic credentials for Kubernetes workloads with Vault and VSO
29mIntro to secrets management using Vault
10mLightning Talk: Exploring HashiCorp Vault and ArgoCD - the GitOps Way
31mVault and Secret Management in Kubernetes