High Availability Vault with DynamoDB in Kubernetes

on YouTube ↗26m

" summary

Covers how to run HashiCorp Vault in Kubernetes with AWS components: configuring auto-unseal using AWS KMS, enabling Vault high-availability backed by DynamoDB (including secret versioning), and setting up authentication via Duo and Kubernetes service accounts. Also demonstrates using Docker custom entrypoints to fetch secrets dynamically at container start.

AI-written summary · about

" chapters (6)

1. 0:00Start
2. 7:11Reduce YAML madness
3. 14:16Secret V2
4. 15:27Tuning Dynamos
5. 16:56KES Deployment
6. 20:32App Authentication

" related talks

• 49mUsing HashiCorp Vault with KubernetesSeth Vargo, Armon Dadgar · Google Cloud Next '18
• 23mUsing Hashicorp Vault in Kubernetes ClustersAlain Lompo · Conf42 Cloud Native 2023
• 30mEfficiently share and manage secrets across applications with HashiCorp VaultMizan Rahman · HashiConf 2024
• 28mSecret Management with Hashicorp´s VaultDaniel Bornkessel · ContainerDays Hamburg 2018
• 08mKubernetes Secret Management The Right Way With VaultMichael Levan · Conf42 Cloud Native 2023
• 49mManaging Secrets in a Kubernetes Cluster with Hashicorp VaultSergey Noskov · РИТ++ 2017
• 23mHashiCorp Vault and Getting Day 2 Operations RightKevin Tuffner · HashiTalks 2021
• 31mVault and Secret Management in KubernetesArmon Dadgar · KubeCon + CloudNativeCon North America 2017