H

hashicorp-vault

[MVP] Multi-layer Terraform IaC for on-premise GitLab deployment on KVM/QEMU (Libvirt). Highly available core components include Kubeadm control plane, Patroni Postgres, Redis Sentinel, MinIO erasure coding, Gitaly Praefect, HashiCorp Vault with hierarchical PKI and AppRole, Harbor Registry, and GitLab Runner. The setup also integrates Keycloak OIDC SSO, standalone Harbor Bootstrapper, and LGTM observability stack. Provisioned end-to-end via Packer, Terraform, and Ansible.

A simple tool to automate rotation of your GitLab access tokens, storing the latest token in a password vault where you can manage and audit access.

GitLab pipeline reusable templates/components and snippets. 1Password CLI, HashiCorp Vault CLI and more to come.

This repository provides a comprehensive, production-grade blueprint for a modern DevSecOps pipeline. It showcases the integration of GitLab CI/CD, Terraform, HashiCorp Vault, and various security tools to build, test, and deploy a containerized Python application to AWS securely and efficiently.

Provide feature to inject vault secrets into kubernetes pods via a sidecar

Copy vanilla k8s secrets to HashiCorp Vault

Use config from vault secret engine

This repository shows you how to inject secrets in your application from Hashicorp Vault in Kubernetes

A container for automatically generating Vault secrets.

Raku implementation of a Hashicorp Vault token helper