Create Kubernetes role

Bind a k8s ServiceAccount to a Vault policy

vault write auth/kubernetes/role/my-role bound_service_account_names=<sa> bound_service_account_namespaces=<ns> policies=<policy> ttl=1h
tool
vault31 commands
tags
vaultconfig

More vault commands

  • Write policy
    vault policy write my-policy policy.hcl

    Upload an HCL policy file to Vault

  • List policies
    vault policy list

    List all policies in Vault

  • Enable secrets engine
    vault secrets enable -path=myapp kv-v2

    Mount a new secrets engine at a given path

  • Transit encrypt
    vault write transit/encrypt/my-key plaintext=$(echo -n 'secret' | base64)

    Encrypt data using Vault's transit encryption engine

  • Transit decrypt
    vault write transit/decrypt/my-key ciphertext=vault:v1:... | base64 -d

    Decrypt a ciphertext with transit engine

all 31 vault commands