HCP Vault Learn Lab: Operations with Terraform
summary
Shows how to codify Vault with Terraform and the Vault provider then apply that config from a local dev server to an HCP Vault cluster; it creates ACL policies (admin, student), a KV v2 and transit engine, username/password users and static secrets, and validates access and a decoded secret. Notes that audit devices and seal keys do not migrate, HCP uses enterprise namespaces (admin) and often a public interface for the demo. Demonstrates scaling dev→plus, adding a performance secondary, using a path filter to remove transit from the replica, and scaling down to starter — all live and working with ~20 lines of Terraform changes.
AI-written summary · about
chapters (7)
- 0:00Introduction and setup
- 1:46Migration concepts
- 8:03Local Vault demonstration
- 15:37Migrating to HCP Vault
- 20:18Scaling and managing clusters
- 30:07Replication and filtering
- 36:58Lifecycle and wrapping up
related talks
46mVault configuration as code via HashiCorp Terraform - Stories from trenches
23mManaging Vault with Terraform
51mRun modern PKI workflows with HCP Vault on AWS
31mHashiCorp Vault Configuration as Code via HashiCorp Terraform: Stories From the Trenches
24mSecrets at Scale with Vault and Waypoint
48mConfiguration as Code
28mFrom code to context: Automating secure DevOps with HashiCorp MCP servers
23mHashiCorp Vault and Getting Day 2 Operations Right