External Secrets Operator with Vault

3 min read

The External Secrets Operator can be configured to retrieve secrets from Vault, to demonstrate this we are going to use a test vault running on Kubernetes.

18/10/2022

Install a development Vault on Kubernetes

2 min read

If you are using Vault for storing secrets, it is desirable to have a different Vault for testing, CI and development. Having to setup an alternate production-grade Vault can be just not worth it (specially for volatile environments)

For local environments it comes handy to use the dev server mode, for Kubernetes we can use the pet2cattle/helm-testvault to deploy it as an in-cluster service

22/09/2022

Vault: Append a value to a list

2 min read

If we want to append a value to a list, using read we will see it like a regular value separated by spaces:

$ vault read -field=bound_iam_role_arn auth/aws-ec2/role/pet2cattle-role
[arn:aws:iam::111111111111:role/pet2cattle-role arn:aws:iam::222222222222:role/pet2cattle-role]

But the we cannot just copy and paste the value, otherwise we would be setting it as a single string

19/10/2021