Applications running in Kubernetes depend on many different sources of secure information, API keys, database credentials, and the ability to encrypt information in transit and at rest. HashiCorp Vault can manage all of these different secret sources and also allows you to apply a consistent workflow across them. In this talk, we look at HashiCorp Vault and how it can be integrated into your Kubernetes workflow, fulfilling all your application's secret needs. We take a high-level overview of Vault's architecture and what it means for you as a developer or operator. Examine Vault's security model and how it integrates with Kubernetes. And finally, look at three simple usage patterns, how to migrate Kubernetes secrets into HashiCorp Vault, how to use Vault to generate x509 certificates to secure your applications, and how you can use Vault as encryption as a service to secure data at rest.

1. © 2019 HashiCorp
Securing Kubernetes
Applications with
HashiCorp Vault
Nic Jackson @sheriffjackson

2. © 2018 HashiCorp
Types of Secret Data
● Static Secrets
● Database Credentials
● Securing Application Endpoints with X509 Certificates
● Encrypting Personal Data

3. © 2018 HashiCorp
Vault Mental Model

4. © 2018 HashiCorp
Kubernetes Authentication Process

5. © 2018 HashiCorp
Dynamic Database Credential Generation

6. Demo Repo:
https://github.com/nicholasjackson/vault-dev-patterns
Further Learning:
https://learn.hashicorp.com/vault?track=getting-started
#getting-started
Vault Helm chart for Kubernetes:
https://github.com/hashicorp/vault-helm
Links:

7. www.hashicorp.com
hello@hashicorp.com
Thank you