Summary

In this chapter, we took a deep dive into HashiCorp Vault, how it integrates with Kubernetes, and the different methods that can be used to access the Vault Secrets through Kubernetes workloads. We used Secrets from Vault either through the vault-agent-injector method or through the CSI Driver. Furthermore, we performed an installation of Vault on Kubernetes and identified the qualities for a Vault production deployment. We also learned about another Secrets provider, CyberArk Conjur, and its capabilities. In the next chapter, we will focus on the overall use cases of Secrets and the different approaches that we can follow for integrating with external secret stores. Also, we will take a deep dive into the approaches to integration with external secret stores.