HashiCorp vault as a KMS provider in Kubernetes

Vault
1

I’m looking for an on-premise KMS provider - Using a KMS provider for data encryption | Kubernetes - to encrypt for data encryption instead of Restful encryption - Encrypting Secret Data at Rest | Kubernetes - with a static encryption key.

The only implementation I found is this archived project @ Oracle: GitHub - oracle/kubernetes-vault-kms-plugin

Does somebody if there is a stable KMS provider available for HashiCorp vault? - preferably supported by Hashicorp -

2 Likes
2

Had the exact same question. Found the answer.

3

Also gave it a try: GitHub - FalcoSuessgott/vault-kubernetes-kms: Encrypt Kubernetes Secrets using Hashicorp Vault as the KMS Provider