Enable Kubernetes auth vault
Enable and configure Kubernetes auth method
vault auth enable kubernetes && vault write auth/kubernetes/config kubernetes_host=https://$KUBERNETES_PORT_443_TCP_ADDR:443
more vault
all 31 commands →
Create Kubernetes role
vault write auth/kubernetes/role/my-role bound_service_account_names=<sa> bound_service_account_namespaces=<ns> policies=<policy> ttl=1h
Write policy
vault policy write my-policy policy.hcl
List policies
vault policy list
Enable secrets engine
vault secrets enable -path=myapp kv-v2
Transit encrypt
vault write transit/encrypt/my-key plaintext=$(echo -n 'secret' | base64)