Integrating Vault and Terraform with Enterprise Machine Identity Services
summary
Shows a working integration that wires a centralized machine identity service into infrastructure-as-code and secrets tooling: a Terraform custom provider (single binary) requests TLS certs and injects cert/key into a Docker nginx container, and a Vault PKI backend plugin redirects issuance to the same service and stores certs with a 5-minute lease observed in the demo. Both plugins call the service REST API, enforce central policies/audit, and the live demos mostly succeed despite brief slowness.
AI-written summary · about
chapters (8)
- 0:00Introduction and motivation
- 4:38Problem with DevOps and certificates
- 8:57Terraform integration overview
- 13:16Terraform demo walkthrough
- 16:08Vault integration overview
- 18:56Vault demo walkthrough
- 22:53Demo results and wrap-up
- 24:15Q&A session
related talks
46mVault configuration as code via HashiCorp Terraform - Stories from trenches
23mManaging Vault with Terraform
45mSecure Together: Consul + Vault
25mSecure Your Terraform Deploys in GitLab-CI with HashiCorp Vault
41mAutomating Multi-Cloud, Multi-Region Vault for Teams and Landing Zones
42mManage Vault programmatically with Terraform
26mCombining DevOps with PKI Compliance Using HashiCorp Vault & Consul
31mHashiCorp Vault Configuration as Code via HashiCorp Terraform: Stories From the Trenches