Catalog Details

  • CATEGORY

    security

  • CREATED BY

  • UPDATED AT

    November 23, 2024

  • VERSION

    0.0.8

Pattern Snapshot

Related Patterns

security
Accelerated mTLS handshake for Envoy data planes
MESHERY4421

What this pattern does:

The Vault server cluster can run directly on Kubernetes. This can be used by applications running within Kubernetes as well as external to Kubernetes, as long as they can communicate to the server via the network. Accessing and Storing Secrets: Applications using the Vault service running in Kubernetes can access and store secrets from Vault using a number of different secret engines and authentication methods. Running a Highly Available Vault Service: By using pod affinities, highly available backend storage (such as Consul) and auto-unseal, Vault can become a highly available service in Kubernetes. Encryption as a Service: Applications using the Vault service running in Kubernetes can leverage the Transit secret engine as "encryption as a service". This allows applications to offload encryption needs to Vault before storing data at rest. Audit Logs for Vault: Operators can choose to attach a persistent volume to the Vault cluster which can be used to store audit logs. And more! Vault can run directly on Kubernetes, so in addition to the native integrations provided by Vault itself, any other tool built for Kubernetes can choose to leverage Vault.

Caveats and Consideration:

refer for Caveats And Considerations from this docs https://developer.hashicorp.com/vault/docs/platform/k8s

Compatibility:



Recent Discussions with "meshery" Tag