Secret Management with Hashicorp´s Vault

on YouTube ↗28m

" summary

Explains concrete Vault setups and what actually works: multiple auth backends are used (tokens, LDAP, GitHub, AWS IAM, Kubernetes, AppRole), Vault issues dynamic database credentials (example: 1‑hour TTL, 240‑hour max TTL) and PKI short‑lived client certs (example: 18 hours), and supports SSH one‑time passwords and a kubernetes auth with init container that shares a token via a volume. Shows Vault creating and revoking DB users, issuing AWS STS creds and TLS certs, and a real project where developers get LDAP→AWS/DB access while apps authenticate via Kubernetes and it works in production.

AI-written summary · about

" chapters (12)

1. 0:00Start
2. 1:45Executive Summary for Vault
3. 7:37Configure Vault
4. 15:31Static Secrets
5. 16:06Dynamic Secrets
6. 17:35Developer Configures Vault
7. 18:06Create a New Dynamic User
8. 18:36How To Create a Dynamic Secret
9. 19:49Aws
10. 22:03Ssh
11. 24:41Vault Policies
12. 27:23Recap How Vault Works

" related talks

• 44mSecret Management with Hashicorp's VaultDaniel Bornkessel · DevFest Nantes 2018
• 43mSecret Management with Hashicorp's VaultDaniel Bornkessel · GOTO Berlin 2018
• 40mA Better Way To Manage SecretsJohnny T · Ruby Hack 2019
• 38mKeeping Secrets - A Practical Approach to Managing CredentialsChris Antenesse · ChefConf 2017
• 51mIntroduction to VaultSeth Vargo · GOTO London 2015
• 29mIntro to secrets management using VaultMouhcine Narhmouche · BlaBlaConf 2022
• 30mEfficiently share and manage secrets across applications with HashiCorp VaultMizan Rahman · HashiConf 2024
• 31mVault and Secret Management in KubernetesArmon Dadgar · KubeCon + CloudNativeCon North America 2017