Vault on Kubernetes with PostgreSQL

This video demonstrates how to use HashiCorp Vault to dynamically create database credentials and inject them into Kubernetes applications without manual intervention 0:05-0:58.

Key Takeaways:
• Vault can automatically create users in databases and inject credentials into applications without the application's awareness 0:53-1:00
• The solution requires Kubernetes 1.17+ with admission controllers, Vault deployed in the cluster, and proper authentication between Vault and Kubernetes 2:05-2:10
• Configuration involves enabling Kubernetes auth in Vault, creating database connection configurations, defining roles with SQL statements for user creation, and creating policies 5:45-7:26
• The Vault injector service is critical for automatically injecting secrets into pods based on annotations in the deployment manifest 13:01-13:27

This approach eliminates the need for humans to manually create and insecurely pass database credentials 14:44-14:53.

Sources:

• 0:05-0:58 Introduction to dynamic database credential management with Vault
• 0:53-1:00 Explaining how Vault creates users and injects credentials transparently
• 2:05-2:10 Kubernetes cluster requirements for this solution
• 5:45-7:26 Configuration steps for database connection and role creation
• 13:01-13:27 Deploying and explaining the Vault injector service
• 14:44-14:53 Summary of ben