🚧🚧🚧🚧🚧 Under Construction 🚧🚧🚧🚧🚧

This repo supports standing up Vault on KinD using Docker or Podman.

Just run the appropriate shell script above depending on your provider.

example:

bash vault_kind_podman.sh or bash vault_kind_docker.sh

These scripts have been tested on my M1 ARM Macbook but should work on Intel as well.

Set Up:

Exercise 00 - Set Up

Exercises:

Exercise 01 - Create Auth method via CLI

Exercise 02 - Create your first secret 🖥-GUI

Exercise 03 - Create your first policy 🖥-GUI

Exercise 04 - Create a policy via CLI

Exercise 05 - Under Construction 👷‍♂️

Exercise 06 - Under Construction 👷‍♂️

K8s secret injection using sidecar:

Exercise 00 - Set up with 🖥-GUI

Exercise 01 - Set up with CLI 👷‍♂️

Security:

Exercise 01 - Under Construction 👷‍♂️

Dynamic db secrets:

Exercise 00 - Under Construction 👷‍♂️

Exercise 01 - Under Construction 👷‍♂️

Vault Enterprise License:

Check Vault license status

kubectl -n vault  exec -ti vault-0 -- vault license get

Resources

https://developer.hashicorp.com/vault/docs/platform/k8s/helm/enterprise

https://medium.com/@LachlanEvenson/hands-on-with-kubernetes-pod-security-admission-b6cac495cd11

https://kubernetes.io/docs/concepts/security/pod-security-standards/