Vault on Kubernetes with PostgreSQL

Folks! Today we're taking a look how to fully automate the secret lifecycle of a password, end to end with no user involved. We learn how to integrate HashiCorp Vault into Kubernetes, how to setup authentication and policies between Vault and PostgreSQL server. Finally we deploy an app that requires a password, which is generated by Vault and injected into our application.
Be sure to checkout the series below and links to the source code :)

Also if you want to support the channel further, become a member 😎

Checkout "That DevOps Community" too

Full playlist:

Introduction to Vault:

TLS end to end Encryption:

Basic Secret Injection:

Running Kubernetes in a Docker Container with Kind:

Source Code
--------------------------------------------------------------

If you are new to Kubernetes, check out my getting started playlist on Kubernetes below :)

Kubernetes Guide for Beginners:
---------------------------------------------------

Kubernetes Monitoring Guide:
-----------------------------------------------

Kubernetes Secret Management Guide:
--------------------------------------------------------------

Like and Subscribe for more :)

Follow me on socials!

Music:

[elchinefa]

Nice job. I installed vault with helm and wanted to test it. I used your tutorial to connect posgresql to vault . Working perfect. I`d like to test it with mysql or some other as well. Thanks for the tutorial.

[anonde]

I've got the exact same Coffee Maker, and soon also a shiny new Vault in my Kubernetes Cluster

[adamstirk]

Interesting video, I’d liked to of seen you cover off what happens when the password expires.

[polmaksim]

Thank you for super great tutorials, just what I was waiting for. If You will have time, please make tutorial with Istio and Kubernetes. How to setup and configure correctly. Thank you.

[Alpha-kthc]

Using it for AWS RDS and GCP Cloud Storage at the same time.
Managing applications in AWS accessing the DB in GCP.

[aperture]

I'd like to se automated ways to get secrets into the vault

[pratikbhandari]

The perfect video which I was looking for .. thanks devops guy ❤️

[inversemetric]

Seems like vault could be used to generate certificates to sign json web tokens

[raghads]

great job man!! I really appreciate the effort

[kumarpatil]

Can you please guide us how can we rotate database secret for mongoDB and how to inject that into Spring boot service. I searched the whole internet but unable to find the solutions

[clavianusjuneardo]

Hi, thanks for the video! But I wonder, what if our application still running but the postgres credentials has been expired, what will happend to the executed queries? Thanks!

[rayudu]

Hey Hi.
How are you.
I need some help to auto unseal vault using shell script in kubernetes yaml files, can you please help me out, if you dont mind.

[preethipriyankamalayala]

great videos! can you please do a video on vault with Azure? Thank you so. much!!

[rayudu]

Hey Hi.
i have facing some issue after vault configuration on ibm kubernetes cluster, i have given Key shares and Key threshold numbers after that i clicked on intilize i got this below issue
"Error
failed to initialize barrier: failed to persist keyring: mkdir /vault/data/core: permission denied", can you please help me out for this one

[kkkant]

Hello
Thanks For the Video Can you please clarify my doubt

Suppose that my application (stateless) is running on an EKS cluster and I'm running the RDS database that is connected to that Stateless application
And I'm using java.properties file to defining the username and password

Now it is not good practice to add the password in the plain text format inside java.properties

How can I connect my stateless java application to the RDS database using vault?