Skip to content

Instantly share code, notes, and snippets.

@viveklak
viveklak / OperatorWithVaultSecretManager.md
Last active April 23, 2021 22:14
Pulumi Kubernetes Operator with Vault Secret Manager
  1. Enable transit encryption and create a key: https://www.vaultproject.io/docs/secrets/transit#setup
  2. Create a policy to grant encryption key access:
   vault policy write transit -<<EOF
   path "transit/encrypt/my-key" {
      capabilities = [ "update" ]
   }
   path "transit/decrypt/my-key" {
      capabilities = [ "update" ]