Talk be secret like a ninja with Vault
•Download as PPTX, PDF•
0 likes•431 views
This document summarizes a talk about using Vault for secrets management. The talk discusses how Vault works from both an operations and developer perspective. It outlines four steps to become a "ninja" with Vault: find secrets, put secrets in Vault, make secrets dynamic, and encrypt sensitive data. The talk demonstrates using Vault as a secret store and for encryption as a service. It encourages exploring additional integrations with Vault like using the Vault agent or integrating with Consul.
More Related Content
What's hot
What's hot (20)
Similar to Talk be secret like a ninja with Vault
Similar to Talk be secret like a ninja with Vault (20)
More from Devoteam Revolve
More from Devoteam Revolve (20)
Recently uploaded
Recently uploaded (20)
Talk be secret like a ninja with Vault
- 2. Equipe Meetup Julien Bichon Community ambassador @jubichon + Talk 1 - Be secret like a ninja with Vault - Mehdi Laruelle + Talk 2 - Retour d'expérience Consul sur AWS - Stéphane Teyssier - Stéphane Teyssier Salim Boulkour Community ambassador @oumidou
- 3. HashiCorp User Group + Depuis 2016 en France + Paris - 937 personnes + Nice - 160 personnes + Toulouse - 151 personnes + Lyon - 144 personnes + Nantes - 103 personnes + On cherche des speakers et des sponsors
- 4. MERCI
- 5. Mehdi LARUELLE @D2SI Be secret like a ninja with Vault Hashicorp
- 6. D2SI Me Mehdi LARUELLE Consultant Cloud & Automation @mehdilaruelle Whoami ?
- 8. PROGRAMME 1 Contextualization 2 Vault Ops side 4 Steps to become a ninja 3 Vault Dev side 5 What’s next ?
- 10. Problem ?
- 12. Vault ? Terraform ? Why ?
- 13. // Vault Ops side2
- 14. Architecture
- 15. Methods & Engines ● LDAP ● RADIUS ● OKTA ● JWT ● Github ● Approle (pipeline) ● TLS Certificate ● Kubernetes ● JWT ● AliCloud / Azure / AWS / GCP ● LDAP Users AppAuth methods
- 16. Methods & Engines K/V ● Alicloud ● AWS ● GCP ● GCP KMS ● Azure Secrets engines Static secrets Dynamic secrets Cloud Technology ● Active Directory ● Consul ● Database ● Nomad ● RabbitMQ Others ● PKI ● SSH ● TOTP Encryption as a Service Transit
- 17. How is it working ? Ops side 1. Push IaC 2. CI/CD process use Terraform Ops
- 18. // Vault Dev side3
- 19. Approle
- 20. How is it working ? Dev side 1. Push code 2. CI/CD process use Terraform Dev Ops 0. Send Role ID
- 21. Steps to be a ninja Find secrets Put secrets in Vault Make secrets dynamics Encrypt sensitive data
- 22. // Steps to become a ninja4
- 23. Steps to be a ninja Find secrets Put secrets in Vault Make secrets dynamics Encrypt sensitive data
- 24. Demonstration
- 25. Steps to be a ninja Find secrets Put secrets in Vault Make secrets dynamics Encrypt sensitive data
- 26. How is it working ?
- 27. Demonstration
- 28. Steps to be a ninja Find secrets Put secrets in Vault Make secrets dynamics Encrypt sensitive data
- 29. Secret as a Service 1.Ask DB credentials 3.Get credentials 5.Ask to revoke credentials
- 30. Demonstration
- 31. Steps to be a ninja Find secrets Put secrets in Vault Make secrets dynamics Encrypt sensitive data
- 32. EaaS: Encryption as a Service Application A Application B 1.Put raw data 2.Get encrypted data 5.Put encrypted data 6.Get decrypted data
- 33. Demonstration
- 34. // What next ?5
- 35. To infinity... and beyond! Vault Agent Consul service mesh envconsul and / or consul- template
- 36. Question ? The last but not least
Editor's Notes
- Les point à développer pour présenter D2SI : Pure player CLoud Partenaire premier AWS - Authorized Training Partner AWS - +300 certifications AWS. Partenaire Google, plusieurs formateurs certifiés GCP Spécialiste du DevOps, Infra as Code, DevSecOps, Serverless.
- Decrire plus + un example par group
- Challenge for two app to store encrypted data in DB
- >> Nicolas