Resources to get started with Hashicorp Vault on Red Hat OpenShift. Most resources can be applied to other Kubernetes distributions though some will require modifications to run outside of OpenShift.
Check out Vault 101 for a quick intro to Vault terms and concepts.
- vault-init
- Deploy and initialize Vault on a Red Hat OpenShift cluster
- vault-in-cluster-config
- Configure Vault for in-cluster Kubernetes authentication
vault-out-of-cluster-config- Configure Vault for out-of-cluster Kubernetes authentication
- vault-role-namespace-sync
- Automatically create Vault roles for namespaces in a Kubernetes cluster
- external-secrets-custom-ca
- Use External Secrets Operator against a secret store using a TLS certificate signed by a custom certificate authority (CA)
- external-secrets-operator-example
- Example code to integrate Hashicorp Vault and OpenShift GitOps (Argo CD) to deploy secrets from Vault to an OpenShift cluster using External Secrets Operator.
- argocd-vault-plugin-example
- Example code to integrate Hashicorp Vault and OpenShift GitOps (Argo CD) to deploy secrets from Vault to an OpenShift cluster using the argocd-vault-plugin.