HashiCorp Vault

Status: Active

Namespace: vault

Port: 8200

Ingress: vault.babdelka.com

Launch Vault →

Overview

HashiCorp Vault is the centralized secrets management engine for the personal server. It secures API tokens, database credentials, TLS certificates, and environment secrets with strict access controls and audit logging.

Key Capabilities

• KV Secret Engine: Versioned key-value store for storing application credentials.
• Kubernetes Auth Method: Allows pods to authenticate against Vault using their service account tokens without hardcoding secrets.
• Production Mode: Running in high-reliability persistent storage mode (non-dev mode).

---

Operations & Unsealing

# Check Vault status
kubectl exec -it -n vault vault-0 -- vault status

# Unseal Vault (when node reboots)
kubectl exec -it -n vault vault-0 -- vault operator unseal <UNSEAL_KEY>