workshop-vault-for-developers

KO | EN

gitlite — search

#python #golang #rust #deep-learning #macos #java #cli #kubernetes #awesome-list #pytorch #security #ios #openai #mcp

workshop-vault-for-developers

(★ 13)

Workshop walkthrough to teach HashiCorp Vault for development teams

workshop-vault-for-developers Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Workshop: HashiCorp Vault for Development Teams

Workshop template to teach HashiCorp Vault for development teams.

## Objectives

Write an application that...

1. Gets a secret from secrets management.
   1. Learn how to use the Vault API
   1. Learn how to use Vault Agent

1. Reloads when a secret changes.
   1. Refactor application to reload
   1. Configure Vault agent to reload application

1. Encrypts data in memory using secrets
   management.
   1. Install Vault SDK for application
   1. Write code to encrypt/decrypt with Vault keys

## Prerequisites

- [Docker for Desktop](https://www.docker.com/products/docker-desktop/) v4.11.1
- [Vault CLI](https://www.vaultproject.io/docs/install) v1.16.1+
- [Kubernetes](https://kubernetes.io/docs/tasks/tools/#kubectl) v1.24.3+
- [Minikube](https://minikube.sigs.k8s.io/docs/start/) v1.26.1+

## Demo Application

```plaintext
                              Get all payments from database
                 ┌───────────────────────────────────────────────────────┐
                 │                                                       │
                 │                                                       │
                 │                                                       │
                 │        3.If success, store encrypted payload          ▼
           payments-app────────────────────────────────────────────►payments-database
           │          ▲
           │          │
           │          │
1.POST     │          │ 2.Return
  encrypted│          │ payment
  payload  │          │ status
           │          │
           ▼          │
           payments-processor
```

## Usage

### Docker Compose

For Docker-only (mostly for in-depth examination), you can review
the tasks in the `docker-compose/Makefile` directory.

Go into the `docker-compose/` directory.

```shell
$ cd docker-compose
```

Set up the Vault server, application database, and payments-processor
application.

```shell
$ make setup
```

For the **Vault agent** example, run:

```shell
$ make java
```

For the **Spring Cloud Vault (code-based)** example, run:

```shell
$ make java-sdk
```

To clean up, run:

```shell
$ make clean
```

### Kubernetes

For Kubernetes, you can review the tasks in the `kubernetes/Makefile` directory.

> NOTE: The Kubernetes deployment uses a Vault agent approach instead
> of a programming language.

Go into the `kubernetes/` directory.

```shell
$ cd kubernetes
```

Set up the Vault server, application database, and payments-processor
application.

```shell
$ make setup
```

For the **SIGTERM**-based approach (framework doesn't have a refresh capability),
run:

```shell
$ make java-sigterm
```

For the refresh API endpoint approach, run:

```shell
$ make java
```

To issue API calls, you can use the Postman collection. However, you'll need
to update the `Environment` to use Minikube's tunnel addresses if you are on Mac.

Run `minikube service payments-app --url`. It will output the URL for the tunnel
that routes to `localhost`.

### Clean Up

To clean up deployments, run `make clean` in the working directory
for the Docker or Kubernetes setups.

## Supported Platforms

- Kubernetes - in code and slides
- Docker (using Docker for Desktop) - in code only

## Supported Languages & Frameworks

- Spring Boot (Java)

workshop-vault-for-developers

workshop-vault-for-developers Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

workshop-vault-for-developers

workshop-vault-for-developers Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README