HashiCorp Vault Secrets

Manage secrets, encryption keys, and dynamic credentials with HashiCorp Vault. Configure secret engines, issue short-lived dynamic database and cloud credentials, write access policies, integrate with Kubernetes and CI, and use Transit for encryption-as-a-service.

Vault centralizes secrets management with tight access control and audit logging. This skill helps you set up KV, database, and PKI secret engines, generate dynamic short-lived credentials, write least-privilege policies, authenticate workloads via AppRole or Kubernetes auth, and use the Transit engine for encryption without exposing keys.

When to use

Use to configure Vault secret engines, issue dynamic database or cloud credentials, write access policies, integrate with Kubernetes/CI, or encrypt data with the Transit engine.

Examples

Dynamic database credentials

Short-lived, auto-rotated creds

Configure Vault to issue dynamic PostgreSQL credentials that expire after one hour

Kubernetes secret injection

Auth workloads to Vault

Set up Vault Kubernetes auth so my pods can fetch secrets without hardcoded tokens

Encryption as a service

Transit engine

Use the Vault Transit engine to encrypt and decrypt sensitive fields without my app ever seeing the key