Vault in BBVA, Secrets in a Hybrid Architecture
summary
BBVA runs two Vault layers: an open‑source infra cluster used by Jenkins/Ansible for machine bootstrapping and a Vault Enterprise runtime tier serving mobile and core banking with geo‑synchronized clusters in Europe and America. The OSS install tops at 500 TPS open source; the Enterprise design (five‑node clusters, integrated storage, F5/DNS routing, Akamai entry) sustains 10,000 TPS enterprise with automatic failover (0–10s). Deployments use Jenkins/Ansible automation, and planned work includes auto-unseal with HSMs (cloud HSM + Thales on‑prem).
AI-written summary · about
chapters (9)
- 0:00Intro
- 1:47About BBVA
- 5:12Secrets.
- 6:10Hybrid Architecture BELAND
- 9:21Vault Infra
- 11:40Vault Evolution, to Enterprise.
- 17:5707 Vault Runtime, Deployment.
- 19:24Vault Use Case. Example
- 22:38Future
related talks
27mScaling Vault Enterprise with a cell architecture
27mVault At Scale
51mIntroduction to Vault
07mBBVA Bank on OpenStack
41mAutomating Multi-Cloud, Multi-Region Vault for Teams and Landing Zones
29mAutomating Vault deployments: Patterns, pitfalls, and practical lessons
27mVault Futures: The Roadmap Ahead for Vault
26mSecrets at scale: GitHub’s 9-year evolution with HashiCorp Vault