How do you leverage static and dynamic secrets sourced from Vault with no native HashiCorp Vault logic built-in your Kubernetes pods?

1. © 2018 HashiCorp
Justin Weissig - Vault Technical Marketing
1
Injecting Vault
Secrets Into
Kubernetes Pods

2. © 2018 HashiCorp
Agenda Vault 101
- What is it, how it works, etc
- Why not Kubernetes Secrets?
Demos
- Proof of concept
- Using templates
- What about a real world example?
Q&A
2

3. © 2018 HashiCorp
How Vault
Works
3
Vault tightly controls access to
secrets and encryption keys.
Vault enables fine grained
authorization of which users
and applications are
permitted access to secrets
and keys.

4. © 2018 HashiCorp
Demos
4

5. www.hashicorp.com
hello@hashicorp.com
Thank you
5

6. © 2018 HashiCorp
Resources
Injecting Vault Secrets Into Kubernetes Pods via a Sidecar
https://hashicorp.com/blog/injecting-vault-secrets-into-kubernetes-pods-via-a-sidecar
Vault Helm Chart
https://github.com/hashicorp/vault-helm
Vault Agent Sidecar Injector (vault-k8s)
https://github.com/hashicorp/vault-k8s
https://www.vaultproject.io/docs/platform/k8s/injector/
Youtube (dynamic secrets + quick walk through)
https://www.youtube.com/watch?v=KIAXQr17-WQ
https://www.youtube.com/watch?v=xUuJhgDbUJQ
Hands on Learn Guide
https://learn.hashicorp.com/vault/getting-started-k8s/sidecar
Vault Agent Sidecar Injector Demo
https://github.com/jweissig/vault-k8s-sidecar-demo
6