Secret Management with Hashicorp's Vault
summary
Overview of concrete Vault outcomes: Vault issues dynamic DB credentials on demand and leases them (short TTLs from minutes to days), generates on‑the‑fly TLS certificates via its PKI, rotates and revokes keys, and records audit trails; it integrates with Google Cloud IAM and optional HSM‑backed master key storage. Real deployment examples show per‑instance DB users created and revoked automatically, policies enforce least privilege, automation reduces human rotation work, and cluster setup and HA ops prove the hardest part.
AI-written summary · about
chapters (19)
- 0:00Intro
- 0:27Focus of this talk
- 1:27Why focus on Vault
- 2:04Other solutions
- 5:15Secret Management: current situation
- 8:24Typical project: Secret Management
- 10:15Vault-executive summary
- 12:21Vault secret backends - dynamic secrets
- 16:12Vault secret backends - Databases
- 17:48Vault secret backends - Google Cloud
- 18:43Vault secret backends - PKI
- 21:04Vault secret backends - SSH
- 22:22Vault secret backends - Transit
- 23:54token auth
- 25:43Vault auth backends - LDAP / Radius / Okta auth
- 26:53Vault auth backends-Kubernetes auth
- 30:05Vault auth backends - GCE auth
- 36:02Vault internals - Audit log
- 41:05Vault usage-integration
related talks
43mSecret Management with Hashicorp's Vault
28mSecret Management with Hashicorp´s Vault
51mIntroduction to Vault
40mA Better Way To Manage Secrets
30mEfficiently share and manage secrets across applications with HashiCorp Vault
29mHow to get dynamic with secrets management
38mKeeping Secrets - A Practical Approach to Managing Credentials
41mModern Security with Microservices and the Cloud