Dynamic User Creation with MySQL on Kubernetes and HCP Vault
summary
Percona XtraDB Cluster on Kubernetes plus HAProxy integrates with HCP Vault using Vault’s database secret engine to create just‑in‑time MySQL accounts. A dedicated hcp user with GRANT OPTION is created, Vault is configured with a role limiting rights to the my_app database and TTL 1h, and the demo generates random usernames/passwords that successfully connect and only see my_app. This is an end‑to‑end working proof using Percona Kubernetes Operator and HCP Vault.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:30Agenda
- 3:49How it works
- 4:41Highlevel view
- 5:50Why on Kubernetes
- 7:47What is Vault
- 8:48Demo
- 9:33Setup
- 11:04Prepare Vault
- 13:17Connecting
- 14:59Recommended setup
- 16:18Demo HCP Vault
related talks
42mHCP Vault Learn Lab: Operations with Terraform
56mDeploying MySQL on Kubernetes & Openshift
42mDynamic credentials for Kubernetes workloads with Vault and VSO
24mHashiCorp Vault Dynamic Database Credentials with Cassandra
49mUsing HashiCorp Vault with Kubernetes
32mThe End of Shared Passwords with Vault and Boundary
28mSecret Management with Hashicorp´s Vault
51mRun modern PKI workflows with HCP Vault on AWS