Empowering credential injection at scale using Boundary
summary
Demonstrates passwordless SSH at scale by having Boundary request a signed key pair from Vault and inject the ephemeral SSH certificate directly into the Boundary worker so users never see credentials, with the worker presenting that certificate to targets whose sshd trusts the Vault CA public key. Shows a working demo, notes credential injection is Boundary Enterprise / HCP only, and solves scale with dynamic credential templating, Packer-embedded CA keys and SSH session recording for accountability across thousands of hosts.
AI-written summary · about
chapters (8)
- 0:00Introduction to credential injection
- 2:48Traditional SSH access challenges
- 8:04Passwordless authentication with credential injection
- 15:33Dynamic SSH certificates for security
- 15:55Scaling challenges with shared accounts
- 18:03Resource sprawl in credential libraries
- 19:48Automating configurations at scale
- 22:16Summary and key takeaways
related talks
53mLearn Lab: SSH Credential Injection with HCP Boundary and Private Vault
39mExplore HashiCorp Boundary
35mHCP Boundary: SSH Credential Injection and Private Vault Access
29mZero Trust Security and Identity Management with Boundary
34mHashiCorp Boundary: Then & Now
32mThe End of Shared Passwords with Vault and Boundary
32mSplicing the Identity Based Access Gene into your Infrastructure DNA with HashiCorp Boundary
15mBoundary: Then and Now [Abridged]