Team projectInnopolis University · Four-person team
HashiCorp Vault on Kubernetes
Four secret-management patterns with Vault and Kubernetes. I authored the API Fetcher use case and its Helm deployment.
The problem
Compare practical ways to deliver configuration and credentials from Vault to workloads running on Kubernetes.
My role
Author of the API Fetcher use case (Flask app, Helm chart and walkthrough) and contributor to the team report.
Main workflows
- KV v2 secret, read policy and Kubernetes role
- Pod annotations for Vault Agent injection
- Helm deployment of the Flask consumer
Technical decisions
- Restricted the fetcher to the configured URL, with request timeouts and redirects rejected, so callers cannot choose arbitrary destinations.
Results
- A documented, reproducible use case with regression tests.
Stack
- HashiCorp Vault
- Kubernetes
- Helm
- Flask
- Vault Agent
Limits & context
Lab examples: high availability and automatic credential rotation are out of scope.