Using HashiCorp Vault with Kubernetes

on YouTube ↗49m

" summary

Shows a working pattern to run Vault as a service on Kubernetes: a 3-node StatefulSet behind an L4 load balancer, Google Cloud Storage for HA, and auto-unseal with GCP KMS plus a custom CA and IPC_LOCK for security. Demonstrates pod authentication via the Kubernetes TokenReviewer and the Vault Kubernetes auth method, secret delivery with Consul Template and shared process namespaces, and dynamic secrets for databases and GCP IAM (example: 5 key shares, threshold 3; short‑lived creds rotated and revocable).

AI-written summary · about

" chapters (4)

1. 0:00Introduction to Vault
2. 15:36Running Vault on Kubernetes
3. 29:15Connecting Kubernetes apps to Vault
4. 43:27Vault roadmap and future

" related talks

• 08mKubernetes Secret Management The Right Way With VaultMichael Levan · Conf42 Cloud Native 2023
• 23mUsing Hashicorp Vault in Kubernetes ClustersAlain Lompo · Conf42 Cloud Native 2023
• 31mVault and Secret Management in KubernetesArmon Dadgar · KubeCon + CloudNativeCon North America 2017
• 26mHigh Availability Vault with DynamoDB in KubernetesVinh Quoc Nguyen · HashiTalks 2019
• 42mDynamic credentials for Kubernetes workloads with Vault and VSOJonathan Frappier · HashiConf 2024
• 28mSelf-Service Vault in KubernetesPato Arvizu · HashiTalks 2020
• 01h 03mSecuring Legacy Applications and Container Microservices in KubernetesCrsitian Prevedello · Incontro DevOps Italia 2021
• 20mEvolving Kubernetes security with Vault and OpenShiftPaul Stamp, Nick Png · HashiConf 2025