Managing VMware Environments with HashiCorp Vault

on YouTube ↗27m

" summary

Demo shows using HashiCorp Vault with PowerCLI to discover ESXi hosts, seed and store root credentials, then generate and rotate unique per host passwords while keeping version history. Authentication ties into LDAP/AD auth so Vault tokens map to existing groups and revoking group membership immediately denies secret access. The presenter runs the workflow against a small lab (three hosts in demo), scripts everything in a public GitHub repo, and demonstrates automated rotation after an admin change.

AI-written summary · about

" chapters (13)

1. 0:00Introduction and agenda
2. 1:03VMware in enterprise data centers
3. 3:08Manual password management methods
4. 6:23VMware native password tools
5. 9:01Scripted password rotation with PowerCLI
6. 12:00Introducing HashiCorp Vault
7. 13:46Storing secrets in Vault
8. 15:59Automating secret seeding with PowerCLI
9. 18:10Generating unique passwords per host
10. 21:04Version control and retrieval of secrets
11. 22:53Role-based access and personnel changes
12. 24:21Automated password rotation workflow
13. 25:57Summary and resources

" related talks

• 24mAuthenticating to HashiCorp Vault in a VMware vSphere EnvironmentMartez Reed · HashiTalks 2020
• 28mSecret Management with Hashicorp´s VaultDaniel Bornkessel · ContainerDays Hamburg 2018
• 40mA Better Way To Manage SecretsJohnny T · Ruby Hack 2019
• 44mSecret Management with Hashicorp's VaultDaniel Bornkessel · DevFest Nantes 2018
• 29mIntro to secrets management using VaultMouhcine Narhmouche · BlaBlaConf 2022
• 43mSecret Management with Hashicorp's VaultDaniel Bornkessel · GOTO Berlin 2018
• 31mIntegrating HashiCorp Vault & Active Directory: Pretty Fly for a Windows GuyPaul Lerner · HashiTalks 2021
• 38mKeeping Secrets - A Practical Approach to Managing CredentialsChris Antenesse · ChefConf 2017