Our Journey Into Secrets Management With Vault
summary
TomTom documents a multi-year rollout: Vault open source POC in 2019, enterprise POC March 2020, MVP → limited availability → company standard. Kubernetes clusters deploy via Terraform and Azure DevOps with Vault Helm chart and one workflow that configures auth and namespaces so apps can consume secrets. Onboarding is a self-service portal that only needs namespace name and AD group; backend pipelines generate namespaces and policies. Built a Python policy generator and an open-source prometheus exporter for secret-expiry alerts; a tens-of-thousands inactive-token spike proves their monitoring rules are useful.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:53About me
- 2:57The story
- 6:11Secret management
- 6:57Requirements
- 8:39Implementation Timeline
- 12:37Expectations From Vault
- 18:03Documentation
- 19:11Kubernetes Integration
- 20:54Monitoring
- 22:47Tools
- 25:29Conclusion
related talks
51mIntroduction to Vault
29mIntro to secrets management using Vault
22mA Journey to Improving SLOs With Vault
28mSecret Management with Hashicorp´s Vault
31mVault and Secret Management in Kubernetes
23mHashiCorp Vault and Getting Day 2 Operations Right
24mSecrets at Scale with Vault and Waypoint
23mManaging Vault with Terraform