falcosuessgott / hashicorp-vault-playground

Bootstrap a local Vault HA Cluster with many useful learning labs in under a minute using only terraform, docker & minikube!

Hi there 👋

Im Tom, DevOps Engineer in Berlin and interested in Linux, Go, Kubernetes and Open Source. Im based in Berlin/Germany.

👷 Check out what I'm currently working on

• kubefirst/gitops-template - a template of gitops infrastucture for consumption by kubefirst users (2 days ago)
• olOwOlo/hugo-theme-even - 🚀 A super concise theme for Hugo https://hugo-theme-even.netlify.app (2 days ago)
• FalcoSuessgott/vault-kubernetes-kms - Encrypt Kubernetes Secrets using Hashicorp Vault as the KMS Provider (5 days ago)

🌱 My latest projects

• FalcoSuessgott/comments - comments for morelly.de using https://github.com/gitalk/gitalk
• FalcoSuessgott/vault-kubernetes-kms - Encrypt Kubernetes Secrets using Hashicorp Vault as the KMS Provider
• FalcoSuessgott/hashicorp-vault-playground - Bootstrap a local Vault HA Cluster with many useful learning labs in under a minute using only terraform, docker & minikube!

🔭 Latest releases I've contributed to

• kubefirst/gitops-template (v2.4.7, 2 days ago) - a template of gitops infrastucture for consumption by kubefirst users
• stmcginnis/gofish (v0.17.0, 5 days ago) - Gofish is a Golang client library for DMTF Redfish and SNIA Swordfish interaction.
• FalcoSuessgott/vault-kubernetes-kms (v0.0.6, 2 weeks ago) - Encrypt Kubernetes Secrets using Hashicorp Vault as the KMS Provider

📜 My recent blog posts

• Git: GPG sign multiple previous commits (1 month ago)

🔨 My recent Pull Requests

• feat(k3d): refactor suggestion on kubefirst/kubefirst (4 days ago)
• fix(k3d-github): fix typo in oidc client module call on kubefirst/gitops-template (4 days ago)
• feat(envs): use utils.ParseEnvs on FalcoSuessgott/vkv (2 weeks ago)

Want your own self-generating profile page? Check out readme-scribe!

hashicorp-vault-playground's Issues

todos

• csi
• approle secret wrapping
• ldap auth & secret mit glauth / openldap
• prometheus & grafana
• boundary with access to kubectl/pods
• create image
• vault acme & caddy
• show secret change and sync
• kubernetes secret method
• Better project structure
• mysql
• add any helm versions, and docker versions in main var file

Build with default options failing, problem deploying external secrets manager

vault-playground version: 1.6.1

╷
│ Error: esm/secret-store failed to create kubernetes rest client for update of resource: resource [external-secrets.io/v1beta1/SecretStore] isn't valid for cluster, check the APIVersion and Kind fields are valid
│ 
│   with module.esm[0].kubectl_manifest.secret_store,
│   on k8s-external-secrets-operator/terraform/esm.tf line 35, in resource "kubectl_manifest" "secret_store":
│   35: resource "kubectl_manifest" "secret_store" {
│ 
╵

Add falcosuessgott/kms