hashicorp/vault-k8s

Stars
697
Rank 64,937 (Top 2 %)
Language
Go
License
Mozilla Public Li...
Created over 5 years ago
Updated over 1 year ago

hashicorp/vault-k8s

hashicorp

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

First-class support for Vault and Kubernetes.

Vault + Kubernetes (vault-k8s)

⚠️ Please note: We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault K8s, please responsibly disclose by contacting us at [email protected].

The vault-k8s binary includes first-class integrations between Vault and Kubernetes. Currently the only integration in this repository is the Vault Agent Sidecar Injector (agent-inject). In the future more integrations will be found here.

The Kubernetes integrations with Vault are documented directly on the Vault website. This README will present a basic overview of each use case, but for full documentation please reference the Vault website.

This project is versioned separately from Vault. Supported Vault versions for each feature will be noted below. By versioning this project separately, we can iterate on Kubernetes integrations more quickly and release new versions without forcing Vault users to do a full Vault upgrade.

Features

Agent Inject: Agent Inject is a mutation webhook controller that injects Vault Agent containers into pods meeting specific annotation criteria. (Requires Vault 1.3.1+)

Installation

vault-k8s is distributed in multiple forms:

The recommended installation method is the official Vault Helm chart. This will automatically configure the Vault and Kubernetes integration to run within an existing Kubernetes cluster.
A Docker image hashicorp/vault-k8s is available. This can be used to manually run vault-k8s within a scheduled environment.
Raw binaries are available in the HashiCorp releases directory. These can be used to run vault-k8s directly or build custom packages.

terraform

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

vault

A tool for secrets management, encryption as a service, and privileged access management

consul

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

vagrant

Vagrant is a tool for building and distributing development environments.

packer

Packer is a tool for creating identical machine images for multiple platforms from a single source configuration.

nomad

Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.

terraform-provider-aws

The AWS Provider enables Terraform to manage AWS resources.

raft

Golang implementation of the Raft consensus protocol

serf

Service orchestration and management tool.

hcl

HCL is the HashiCorp configuration language.

go-plugin

Golang plugin system over RPC.

terraform-cdk

Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform

waypoint

A tool to build, deploy, and release any application on any platform.

consul-template

Template rendering, notifier, and supervisor for @HashiCorp Consul and Vault data.

terraform-provider-azurerm

Terraform provider for Azure Resource Manager

otto

Development and deployment made easy.

golang-lru

Golang LRU cache

boundary

Boundary enables identity-based access management for dynamic infrastructure.

memberlist

Golang package for gossip based membership and failure detection

go-memdb

Golang in-memory database built on immutable radix trees

next-mdx-remote

Load mdx content from anywhere through getStaticProps in next.js

terraform-provider-google

Terraform Provider for Google Cloud Platform

go-multierror

A Go (golang) package for representing a list of errors as a single error.

yamux

Golang connection multiplexing library

envconsul

Launch a subprocess with environment variables using data from @HashiCorp Consul and Vault.

go-retryablehttp

Retryable HTTP client in Go

terraform-provider-kubernetes

Terraform Kubernetes provider

go-getter

Package for downloading things from a string URL using a variety of protocols.

best-practices

go-version

A Go (golang) library for parsing and verifying versions and version constraints.

go-metrics

A Golang library for exporting performance and runtime metrics to external metrics systems (i.e. statsite, statsd)

setup-terraform

Sets up Terraform CLI in your GitHub Actions workflow.

terraform-guides

Example usage of HashiCorp Terraform

mdns

Simple mDNS client/server library in Golang

terraform-provider-helm

Terraform Helm provider

vault-guides

Example usage of HashiCorp Vault secrets management

go-immutable-radix

An immutable radix tree implementation in Golang

vault-helm

Helm chart to install Vault and other associated components.

terraform-ls

Terraform Language Server

vscode-terraform

HashiCorp Terraform VSCode extension

levant

An open source templating and deployment tool for HashiCorp Nomad jobs

terraform-exec

Terraform CLI commands via Go.

consul-k8s

First-class support for Consul Service Mesh on Kubernetes

terraform-aws-vault

A Terraform Module for how to run Vault on AWS using Terraform and Packer

terraform-github-actions

Terraform GitHub Actions

terraform-provider-vsphere

Terraform Provider for VMware vSphere

raft-boltdb

Raft backend implementation using BoltDB

nextjs-bundle-analysis

A github action that provides detailed bundle analysis on PRs for next.js apps

go-discover

Discover nodes in cloud environments

consul-replicate

Consul cross-DC KV replication daemon.

next-mdx-enhanced

A Next.js plugin that enables MDX pages, layouts, and front matter

docker-vault

Official Docker images for Vault

terraform-provider-kubernetes-alpha

A Terraform provider for Kubernetes that uses dynamic resource types and server-side apply. Supports all Kubernetes resources.

vault-secrets-operator

The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets.

terraform-k8s

Terraform Cloud Operator for Kubernetes

puppet-bootstrap

A collection of single-file scripts to bootstrap your machines with Puppet.

cap

A collection of authentication Go packages related to OIDC, JWKs, Distributed Claims, LDAP

terraform-provider-vault

Terraform Vault provider

damon

A terminal UI (TUI) for HashiCorp Nomad

nomad-autoscaler

Nomad Autoscaler brings autoscaling to your Nomad workloads.

consul-helm

Helm chart to install Consul and other associated components.

terraform-provider-azuread

Terraform provider for Azure Active Directory

vault-ssh-helper

Vault SSH Agent is used to enable one time keys and passwords

terraform-provider-scaffolding

Quick start repository for creating a Terraform provider

terraform-aws-consul

A Terraform Module for how to run Consul on AWS using Terraform and Packer

docker-consul

Official Docker images for Consul.

nomad-pack

hil

HIL is a small embedded language for string interpolations.

vault-action

A GitHub Action that simplifies using HashiCorp Vault™ secrets as build variables.

learn-terraform-provision-eks-cluster

terraform-plugin-sdk

Terraform Plugin SDK enables building plugins (providers) to manage any service providers or custom in-house solutions

terraform-config-inspect

A helper library for shallow inspection of Terraform configurations

hcl2

Former temporary home for experimental new version of HCL

errwrap

Errwrap is a Go (golang) library for wrapping and querying errors.

go-cleanhttp

design-system

Helios Design System

logutils

Utilities for slightly better logging in Go (Golang).

vault-ruby

The official Ruby client for HashiCorp's Vault

vault-rails

A Rails plugin for easily integrating Vault secrets

next-remote-watch

Decorated local server for next.js that enables reloads from remote data changes

waypoint-examples

Example Apps that can be deployed with Waypoint

go-hclog

A common logging package for HashiCorp tools

vault-csi-provider

HashiCorp Vault Provider for Secret Store CSI Driver

nomad-guides

Example usage of HashiCorp Nomad

consul-haproxy

Consul HAProxy connector for real-time configuration

terraform-provider-google-beta

Terraform Provider for Google Cloud Platform (Beta)

consul-esm

External service monitoring for Consul

http-echo

A tiny go web server that echos what you start it with!

terraform-provider-awscc

Terraform AWS Cloud Control provider

terraform-aws-nomad

A Terraform Module for how to run Nomad on AWS using Terraform and Packer

faas-nomad

OpenFaaS plugin for Nomad

go-sockaddr

IP Address/UNIX Socket convenience functions for Go

terraform-foundational-policies-library

Sentinel is a language and framework for policy built to be embedded in existing software to enable fine-grained, logic-based policy decisions. This repository contains a library of Sentinel policies, developed by HashiCorp, that can be consumed directly within the Terraform Cloud platform.

nomad-driver-podman

A nomad task driver plugin for sandboxing workloads in podman containers

vagrant-vmware-desktop

Official provider for VMware desktop products: Fusion, Player, and Workstation.

go-tfe

HCP Terraform/Enterprise API Client/SDK in Golang

nomad-pack-community-registry

A repo for Packs written and maintained by Nomad community members

boundary-reference-architecture

Example reference architecture for a high availability Boundary deployment on AWS.

terraform-plugin-framework

A next-generation framework for building Terraform providers.

vault-plugin-auth-kubernetes

Vault authentication plugin for Kubernetes Service Accounts