Managing Vault with Terraform
summary
Shows how Terraform plus the Terraform Vault provider configures Vault end-to-end: deploys a GKE cluster with Vault Helm chart and Consul, takes ~4–5 minutes, then initializes and manually unseals the cluster and runs terraform apply to push config. Terraform enables userpass auth, creates three policies (admin, developer, ops), mounts two KV v2 secret engines and writes test data. Everything successfully applies; caveats: state contains plaintext secrets so use encrypted remote state and prefer auto‑unseal or short‑lived credentials for dynamic engines.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:56What is a Provider
- 3:04Demo Workflow
- 4:08Deploying Vault
- 5:13Vault Policies
- 6:47Terraform State
- 8:54Demo
- 11:15Vault ITF
- 12:42Vault Config
- 15:35Vault Login
- 17:03Vault Configuration
- 18:27Verifying Vault Configuration
- 19:47Creating a Developer User
- 20:39Developer Permissions
related talks
42mManage Vault programmatically with Terraform
46mVault configuration as code via HashiCorp Terraform - Stories from trenches
42mHCP Vault Learn Lab: Operations with Terraform
23mHashiCorp Vault and Getting Day 2 Operations Right
20mVault Automation with the HashiCorp Stack in OneMount
29mAutomating Vault deployments: Patterns, pitfalls, and practical lessons
25mSecuring and Scaling AWS with Terraform, Vault, and Veeam: A Practical Guide
27mIntegrating Vault and Terraform with Enterprise Machine Identity Services