Vault At Scale
summary
Manages 25 production environments, over 6,000 containerized applications and 12 geographically distributed HA Vault clusters across multiple clouds, using an infrastructure repo, operator scripts and the safe CLI to target and automate Vaults. Covers real incidents: a DynamoDB backend bug that removed deeply nested paths, migrating a backend without re-keying via export/import, and how 600,000 leases can slow unseal. Gives concrete checks, monitoring points, and one‑line commands used to export, migrate and restore so operators can reproduce recovery.
AI-written summary · about
chapters (6)
- 0:00Start
- 0:25What's Vault?
- 8:18Understand resource consumption under load • Ability to meet and measure SLA requirements • Multiple data centers and/or environments . Confidence and knowledge of inner workings • Tooling for rapid iteration
- 9:15How does Vault scale?
- 26:39How do we run Vault at scale?
- 27:08Recording and Production Confreaks
related talks
29mAutomating Vault deployments: Patterns, pitfalls, and practical lessons
23mHashiCorp Vault and Getting Day 2 Operations Right
41mAutomating Multi-Cloud, Multi-Region Vault for Teams and Landing Zones
25mLessons learned from deploying Vault at scale
29mAdopting HashiCorp Vault: Deployment, Adoption, and Beyond
28mSelf-Service Vault in Kubernetes
26mSecrets at scale: GitHub’s 9-year evolution with HashiCorp Vault
27mScaling Vault Enterprise with a cell architecture