We use Vault across our large Kubernetes deployments and all the projects were reinventing the wheel. Vault replication across multiple datacenters on Kubernetes.Inject secrets directly into pods from Vault.Monitoring Vault on Kubernetes using Cloud Native technologies.Secure Kubernetes Deployments with Vault and Pipeline.Dynamic credentials with Vault using Kubernetes Service Accounts.Authentication and authorization of Pipeline users with OAuth2 and Vault.Securing Kubernetes deployments with Vault: Some of the usage patterns are highlighted through these blog posts: It also provides a Kubernetes operator for provisioning, and a mutating webhook for injecting secrets.īank-Vaults is a core building block of the Banzai Cloud Pipeline platform. It has a CLI tool to automatically initialize, unseal, and configure Vault. It's a wrapper for the official Vault client with automatic token renewal and built-in Kubernetes support, dynamic database credential provider for Golang database/sql based clients. Watch out for clean-up sets.īank-Vaults is an umbrella project which provides various tools for Vault to make using and operating Hashicorp Vault easier. Think heavy steel doors, secret unlocking combinations and burly guards with smack-down attitude. Bank Vaults is a thick, tricky, shifty right with a fast and intense tube for experienced surfers only, located on Mentawai.

Bank vault