Hyperledger Fabric from Docker-compose to Orchestration: Using Vault & Consul-Template for PKI
summary
Shows how HashiCorp Vault PKI engine plus consul-template generate Hyperledger Fabric certificates via Vault API, using ECDSA ECDSA P-256 keys and role templates for separate MSP and TLS CAs. Builds a working Docker‑compose network (1 orderer, 1 peer, CLI), proves peers join with those certs, and translates the same flow into a Nomad template (and Kubernetes) so certificates auto‑renew and containers restart for rotation. Code and Postman collection are available in the uploader's repo.
AI-written summary · about
chapters (13)
- 0:00The problem with certs
- 1:20Agenda and blockchain intro
- 3:26Hyperledger Fabric and PKI
- 4:52Vault PKI engine overview
- 6:03Setting up the vault demo
- 8:04Configuring PKI engines
- 9:31Generating fabric certs
- 12:32Examining generated certs
- 14:53Deep dive into vault roles
- 17:32Starting the network
- 18:59Channel creation and testing
- 20:43Dynamic scaling and orchestration
- 22:49Conclusion and resources
related talks
39mMulti-tenancy & Blockchain: Deploying Hyperledger Fabric on Kubernetes
39mMulti-tenancy & Blockchain: Deploying Hyperledger Fabric on Kubernetes
51mRun modern PKI workflows with HCP Vault on AWS
29mAutomating Vault deployments: Patterns, pitfalls, and practical lessons
58mConsul + Vault Learn Lab: Consul API Gateway
35mCreating your First Smart Contract on Hyperledger Fabric!
32mBuilding Blockchain as a Service via Hyperledger Cello
31mBuilding a Repeatable and Hardened Vault POC