HashiCorp Vault

Vault provides centralized secrets management for the MEGATRON cluster.

Overview

PropertyValue
Namespacevault
AccessInternal (ClusterIP) on port 8200
Uptime3h51m at last audit (recently restarted)
StatusRunning

Key Concerns

  • Vault was recently restarted (only 3h51m uptime at audit). After a restart, Vault needs to be unsealed before it can serve secrets.
  • Verify seal status: kubectl exec -n vault vault-0 -- vault status

Quick Commands

kubectl get pods -n vault
kubectl exec -n vault vault-0 -- vault status
kubectl exec -n vault vault-0 -- vault secrets list

TODO: expand with secret engine configuration, policies, Kubernetes auth method, and backup procedures.