vault

• 2026-05-225 min

  consul-template in the GitLab CI deploy job

  Using consul-template -once to render Vault secrets into Helm chart config/ before helm upgrade. HCL template patterns for per-service and shared secrets, CA cert rendering, and why this beats ESO for CI-time secret injection.

  cicdvaultkubernetesdevops

• 2026-05-214 min

  Vault JWT auth from GitLab CI: no static tokens

  Configuring Vault JWT auth with GitLab JWKS, per-environment roles with bound_claims on ref and project_path, short-lived Vault tokens in CI jobs, and kubeconfig fetched from Vault at deploy time.

  vaultsecuritycicdgitlab

• 2026-03-193 min

  External Secrets Operator + HashiCorp Vault: Kubernetes auth flow

  ESO authenticates to Vault using a Kubernetes ServiceAccount token. ClusterSecretStore, ExternalSecret, and the bootstrap steps for Vault Kubernetes auth.

  kubernetessecurityvaultdevops

• 2026-02-136 min

  External Secrets Operator with HashiCorp Vault: JWT auth and KV v2

  ESO ClusterSecretStore with Vault JWT authentication via Kubernetes service accounts, ExternalSecret syncing KV v2 paths, refresh interval, secret templating, and ESO vs SealedSecrets tradeoffs.

  kubernetessecretsvaultsecurity

• 2026-02-107 min

  HashiCorp Vault: bootstrap, unseal, and Kubernetes auth

  Vault HA with Raft storage, operator init ceremony, manual unseal vs YC KMS auto-unseal, Kubernetes auth method setup, KV v2, policies, and ESO role binding.

  securityvaultkubernetesdevops

No posts match the selected filters.