The Vault Swiss Army knife, which makes enterprise-grade security attainable on Kubernetes. It has many 'blades' that cut through the security problem: the Bank-Vaults operator provides automation; a Go client with automatic token renewal that provides dynamic secret generation, multiple unseal options, and more; a CLI tool to initialize, unseal and configure Vault with authentication methods and secret engines; and direct secret injection into Pods to reduce the attack surface. Automates the entire Vault lifecycle in your Kubernetes clusters. Provides seamless integration with non-Vault-aware applications without storing the decrypted secret anywhere. Vault is the de-facto standard for secret management in cloud-native environments. Bank-Vaults provides various tools for Hashicorp Vault to make its use easier. A wrapper for the official Vault client with automatic token renewal, built in Kubernetes support, and a dynamic database credential provider.
Features
- A CLI tool to automatically initialize, unseal and configure Vault
- A Kubernetes operator for provisioning, and a mutating webhook for injecting secrets
- A wrapper for the official Vault client with automatic token renewal, built in Kubernetes support
- Dynamic database credential provider
- Bank-Vaults can be used as a CLI tool or accessed from code through a Golang library
- Supports OAuth2 tokens, K8s auth, Vault operator, dynamic secrets, cloud credential storage, etc.