Securing RabbitMQ with Vault
summary
Shows how Vault is configured to create dynamic credentials for RabbitMQ and refactors a simple Go producer/consumer to fetch them at runtime instead of hard-coded strings. Uses Vault, RabbitMQ in Docker, Nomad for scheduling, and the Vault HTTP API; the demo creates a short-lived RabbitMQ user (visible ID ~1419) with TTL 60s (max 120s) and successfully publishes and consumes a message using the ephemeral account.
AI-written summary · about
chapters (8)
- 0:00Introduction to problem
- 4:16Agenda overview
- 4:52Understanding Vault basics
- 8:22Vault core components
- 12:55Message queues with RabbitMQ
- 16:39Live demo environment setup
- 22:02Configuring Vault and RabbitMQ
- 24:09Refactoring application code
related talks
39mZero Trust RabbitMQ with HashiCorp Vault
31mModern Security with Microservices and the Cloud
26mA Nomadic Vault: Secrets for Schedulers and Runtimes
28mSecret Management with Hashicorp´s Vault
40mA Better Way To Manage Secrets
35mEnhancing Cloud Foundry Application Security with Vault
51mIntroduction to Vault
29mAutomating Vault deployments: Patterns, pitfalls, and practical lessons