PhilippTheServer

secrets-management

Getting a secret to a process without leaving it on disk or in git.

  1. External Secrets with Offline JWT Validation When Vault Cannot Reach the Cluster

    Vault kubernetes auth "failed to validate token" tokenreviews i/o timeout: jwt auth with jwt_validation_pubkeys from sa.pub for External Secrets.

    kubernetes vault secrets-management security

  2. Breaking the Circular Dependency in GitOps Secret Delivery

    External Secrets SecretStore tokenSecretRef needs a Vault token before GitOps can deliver one. Breaking the loop with one out-of-band secret.

    kubernetes gitops secrets-management

  3. Runtime Secret Injection with a Vault Agent Sidecar and a Wrapped AppRole

    secret_id_response_wrapping_path in Vault Agent approle auto_auth: a sidecar that bootstraps from a single-use wrapped secret_id and renders secrets to a file.

    vault secrets-management security docker

  4. Vault KV-v2: Why put Silently Wipes Every Sibling Field

    vault kv put wipes sibling fields and -cas fails with "check-and-set parameter did not match the current version": why, and how patch avoids it.

    vault secrets-management security

All topics · All writing