Managing Target's Secrets Platform
summary
Target runs an enterprise Vault cluster backing 1,900 stores and 46 distribution centers, automated from initial unattended builds to policy creation via a CI/CD onboarding pipeline that validates groups, tests policies, and publishes them. Monitoring combines host checks, Vault and Consul metrics and synthetic tests from remote nodes to detect real-user failures. Compliance gating calls out regulatory apps for approval, certificate rotation and rolling upgrades are automated to keep availability during maintenance.
AI-written summary · about
chapters (10)
- 0:00Introduction to Target's secrets platform
- 2:16Security and compliance requirements
- 4:22Building the platform infrastructure
- 6:06Onboarding customers manually
- 7:30Automating customer onboarding
- 8:13Supporting users with documentation
- 9:17Adding compliance checks
- 10:21Ensuring platform availability
- 11:50Monitoring and synthetic testing
- 13:35Maintaining the platform long-term
related talks
28mOur Journey Into Secrets Management With Vault
27mVault At Scale
23mHashiCorp Vault and Getting Day 2 Operations Right
51mIntroduction to Vault
40mDay 2 keynote
28mEmbedding secrets governance into the enterprise through organizational change
01h 03mSecuring Legacy Applications and Container Microservices in Kubernetes
32mVault Updates & Future Direction 2022