Hashicorp Vault Management With Kubernetes Via Helm

Learn Hashicorp vault fundamental on kubernetes by understanding the core concepts by deep diving internal architecture.

What you'll learn

Vault Administration & Implementation

99% of the course is built on DEMOS

Install HashiCorp Vault and Configure HashiCorp Vault on Kubernetes Cluster

HashiCorp Vault Authentication, Secrets, and Tokens

Authenticate Users to Vault via UI/CLI/API

[Theory] How does vault injector works

Covered different aspect of managing Vault

Access HashiCorp Vault Web-Based User Interface

Creating HashiCorp Vault Policies via GUI/API/CLI

Injecting Secrets into Kubernetes Pods via Vault Agent Containers

Requirements

Basic security knowledge

IDE installed on local system

Trial Version of Azure Account

Description

HashiCorp Vault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computingHashiCorp Vault is a tool that is used to store, process, and generally manage any kind of credentials. It removes the need for traditional databases that are used to store user credentials. Even though it provides storage for credentials, it also provides many more features. You will be able to create and revoke secrets, grant time-based access, IP-based access, and much more.Vault comes with various pluggable components called secrets engines and authentication methods allowing you to integrate with external systems. The purpose of those components is to manage and protect your secrets in dynamic infrastructure (e.g. database credentials, passwords, API keys).What you will learn in this course:As an administrator or developer how to manage, deploy& configure Vault on kubernetes clusterHow to connect PODs/application with Vault via InjectorDeploy & manager Vault on Azure Kubernetes ClusterManage different components like secrets, users, policies and many more via UI/API/CLIChampion Vault in less then 4 hours with ALL DemosCourse Agenda:Course IntroductionIntroduction to HashiCorp VaultLearn the Vault Architecture easy wayInstalling Vault on Kubernetes ClusterDeploy Vault via HELM on Kubernetes clusterDifferent Authentication Methods in VaultAssess Vault via root TokensCreate user authentication - manually & using for-loopWrite Vault Policies via UI/CLI/APICreate KV Secrets EnginesManage Vault components via CLI, API, and UIAutomation entire deployment of Vault servicesReal infrastructure example on how to manage HashiCorp VaultAccess HashiCorp Vault via Web-Based User InterfaceHashiCorp Vault Authentication, Secrets, and TokensWrite HashiCorp Vault PoliciesUse HashiCorp Vault Application Programming Interface to automate administrationAuthenticate Users via Vault

Overview

Section 1: Introduction to the Hashicorp Vault Component

Lecture 1 Introduction to the Course

Lecture 2 What is Hashicorp Vault

Lecture 3 How to Interact with Vault

Lecture 4 Vault Secrets Engines

Lecture 5 Vault Authentication Methods

Lecture 6 Policies to manage Vault access

Section 2: Vault on Azure Kubernetes Cluster

Lecture 7 Create an Azure Kubernetes Cluster - via UI

Lecture 8 Deploy VAULT as a service on cluster via HELM

Lecture 9 Vault Unseal - UI

Lecture 10 Vault Status, Init & Unseal - CLI

Section 3: Vault Authentication & Authorization - User Pass

Lecture 11 Userpass Auth Method - via UI

Lecture 12 Create auth method via CLI

Lecture 13 Create auth method via CLI for loop

Lecture 14 Access vault via new user(dev role)

Lecture 15 Create user via CLI

Lecture 16 Create user via API

Lecture 17 Enable userpass via API

Lecture 18 for loop to create multiple users via CURL

Lecture 19 Login via CLI & API

Section 4: Vault Github Authentication

Lecture 20 Enable Github authentication

Lecture 21 Configure Github organisation id and login

Lecture 22 Create Github Vault auth via CURL

Section 5: Security Policies on Vault

Lecture 23 Create KV secret engine - UI

Lecture 24 Create first policy to view secret engine

Lecture 25 List path based folder in KV secret engine

Lecture 26 Create WRITE/DELETE/UPDATE policy for users

Lecture 27 CRUD policy for users to manage secrets

Lecture 28 Enable & attach secret engine/policy via CLI

Lecture 29 Enable KV secret engine via API

Lecture 30 Create & attach policy via API

Section 6: Configuration via Terraform

Lecture 31 Create backend auth via Terraform

Lecture 32 Create Secret Engine

Lecture 33 Create user & admin policies via Terraform

Section 7: High Available Vault Deployment

Lecture 34 Configuration for HA Vault

Lecture 35 Deploy a 3 node vault cluster : HA Mode

Lecture 36 Unseal a 3 node cluster

Lecture 37 Disable Liveliness to unseal vault

Section 8: Injecting Vault Secrets into PODS via Sidevar

Lecture 38 Introduction to Vault Injector for PODs

Lecture 39 Deploy Vault on Minikube Cluster

Lecture 40 Config Kubernetes auth & service a/c & policies

Lecture 41 Deploy an APP & fetch secrets from Vault

Lecture 42 Managing Kubernetes Config via API

Lecture 43 Create K8S auth config via API

Lecture 44 Manage K8S auth&config via Vault CLI

Security Engineers,Vault Administrator,DevOps Engineer,Infrastructure Engineers,Developers