Hashicorp Vault

Manage your secrets in Hashicorp Vault.

export VAULT_ADDR=http://127.0.0.1:8200
export VAULT_AUTH_METHOD=kubernetes-account-service
export VAULT_ROLE={{vault role}}

# optionally, if k8s auth is registered at a different address, then
export VAULT_AUTH_PATH=/v1/auth/kubernetes/login

The VAULT_AUTH_METHOD variable is how the agent is authenticating into Vault.

Both k8s (account-service) and vault needs to be configured for this method to work.

You can find more details here: https://www.vaultproject.io/docs/auth/kubernetes