A Journey to Improving SLOs With Vault
summary
Citrix builds an observability-as-code pipeline using GitOps, Packer/Ansible/Terraform, and Vault for secrets, deploying Vault HA over Azure Private Link to deliver dynamic API keys to dashboards, CI/CD and synthetic monitors. Platform ingests New Relic/Prometheus/Datadog/Splunk, serves ~2,800 engineers across 135 microservices with 500–1,000 secrets per environment, automates onboarding and SLOs as code, and cuts manual secret work by 250–300 human-days while eliminating ~20% of incidents tied to secret handling.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:26Presentation Overview
- 2:45Requirements
- 3:59Observability
- 5:37Observability as Code
- 6:54Deployment Pipeline
- 7:49Role of Vault
- 8:46Deployment
- 9:22Code Examples
- 12:03SLO Example
- 14:26Cloud Platform Example
- 18:24Whats Next
related talks
35mSynchrony's journey to automated, resilient and compliant Vault governance
28mOur Journey Into Secrets Management With Vault
38mSecrets Management - Falling into the Pit of Success
24mDeveloper-First Application Security and DevSecOps
26mSecrets at scale: GitHub’s 9-year evolution with HashiCorp Vault
25mIntegrating Vault with CI/CD pipelines: Best practices and pitfalls
29mIntro to secrets management using Vault
27mVault At Scale