Skip to content

Commit

Permalink
Update vault readme.md, fix some typos
Browse files Browse the repository at this point in the history
Two spelling mistakes.
Formatting.
Better linking to text file.
Fix last link.
  • Loading branch information
LeeNX authored and marcel-dempers committed Oct 26, 2020
1 parent 4458691 commit cc5d627
Showing 1 changed file with 7 additions and 10 deletions.
17 changes: 7 additions & 10 deletions hashicorp/vault/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,8 @@ kind create cluster --name vault --kubeconfig ~/.kube/kind-vault --image kindest

## TLS End to End Encryption

VIDEO: <Coming-Soon>
See steps in `hashicorp/vault/tls/ssl_generate_self_signed.txt`
VIDEO: ```<Coming-Soon>```
See steps in [./tls/ssl_generate_self_signed.txt](./tls/ssl_generate_self_signed.txt)
You'll need to generate TLS certs (or bring your own)
Create base64 strings from the files, place it in the `server-tls-secret.yaml` and apply it.
Remember not to check-in your TLS to GIT :)
Expand All @@ -38,21 +38,20 @@ kubectl -n vault-example get pvc
```
ensure vault-claim is bound, if not, `kubectl -n vault-example describe pvc vault-claim`
ensure correct storage class is used for your cluster.
if you need to change the storage class, deleve the pvc , edit YAML and re-apply
if you need to change the storage class, delete the pvc, edit YAML and re-apply

## Initialising Vault

```
kubectl -n vault-example exec -it vault-example-0 vault operator init
#unseal 3 times
# unseal 3 times
kubectl -n vault-example exec -it vault-example-0 vault operator unseal
kubectl -n vault-example get pods
```

## Depploy the Injector

VIDEO: <Coming-Soon>
## Deploy the Injector

VIDEO: ```<Coming-Soon>```
Injector allows pods to automatically get secrets from the vault.

```
Expand All @@ -68,7 +67,6 @@ For the injector to be authorised to access vault, we need to enable K8s auth
kubectl -n vault-example exec -it vault-example-0 vault login
kubectl -n vault-example exec -it vault-example-0 vault auth enable kubernetes
kubectl -n vault-example exec -it vault-example-0 sh
vault write auth/kubernetes/config \
token_reviewer_jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" \
Expand All @@ -77,7 +75,6 @@ kubernetes_ca_cert=@/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
exit
kubectl -n vault-example get pods
```

# Summary
Expand Down Expand Up @@ -108,7 +105,7 @@ Objective:
* Let's delegate Vault to manage life cycles of our database credentials
* Deploy an app, that automatically gets it's credentials from vault

[Try it](./example-apps/basic-secret/readme.md)
[Try it](./example-apps/dynamic-postgresql/readme.md)



Expand Down

0 comments on commit cc5d627

Please sign in to comment.