OpenStack Plugin for Vault
summary
An OpenStack plugin for HashiCorp Vault that actually issues Keystone tokens, creates temporary users and tokens with project/domain scopes, and returns a full Cloud YAML output for Ansible and Terraform workflows. Roles map to Vault policies, leases and TTLs are returned, and a commandable automatic root password rotation exists so admin passwords never leave Vault; resource cleanup after lease expiry is explicitly out of scope. The plugin is implemented, tested in deployments, and released to the community.
AI-written summary · about
chapters (9)
- 0:00Introduction to secret management
- 1:31Vault and OpenStack integration
- 3:26Defining roles and scope
- 5:58Reference workflow overview
- 7:17Configuring credentials and roles
- 10:31Practical usage examples
- 13:28Security and maintenance
- 16:41Roadmap and community future
- 18:05Q&A and conclusion
related talks
29mAutomating Vault deployments: Patterns, pitfalls, and practical lessons
28mSelf-Service Vault in Kubernetes
23mUsing Hashicorp Vault in Kubernetes Clusters
31mSecure Your Multi-Cloud Delivery Pipeline with HashiCorp Vault
44mSecret Management with Hashicorp's Vault
14mSmooth Operator: Vault & the Kubernetes Operator Framework
46mVault configuration as code via HashiCorp Terraform - Stories from trenches
23mHashiCorp Vault and Getting Day 2 Operations Right