Lessons learned from deploying Vault at scale
summary
Concrete deployment checklist: choose Vault integrated Raft storage for reliability or Conrono only if write throughput becomes a bottleneck; prefer HSM-based or cloud KMS auto-unseal with cloud KMS over manual unseal or a second Vault to reduce ops; use enterprise performance standbys plus a proper load balancer that respects Vault health API codes; automate installs with the Ansible Vault role or Terraform providers; take snapshots but also run and validate full restores and synthetic workflows against Prometheus metrics and alerting.
AI-written summary · about
chapters (6)
- 0:00Introduction and overview
- 3:09Planning your Vault setup
- 15:14Deploying Vault
- 17:03Production hardening
- 18:45Configuring and operating Vault
- 23:47Troubleshooting and wrap-up
related talks
29mAdopting HashiCorp Vault: Deployment, Adoption, and Beyond
23mHashiCorp Vault and Getting Day 2 Operations Right
27mVault At Scale
29mDesigning High Availability for HashiCorp Vault in AWS
27mScaling Vault Enterprise with a cell architecture
31mBuilding a Repeatable and Hardened Vault POC
23mManaging Vault with Terraform
31mHashiCorp Vault Configuration as Code via HashiCorp Terraform: Stories From the Trenches