hashicorp / go-kms-wrapping

KMS wrapping libraries split out from Vault
Mozilla Public License 2.0
58 stars 45 forks source link

Add support to Kubernetes Authtentication against Vault #171

Open karmops opened 1 year ago

karmops commented 1 year ago

I have Hashicorp Vault running in my cluster. I want to use the Transit mechanism for the KMS setup. With this feature, I could map the service account to a vault role and vault policy to authenticate Boundary against it instead of using client certificates.

Kubernetes Auth Method https://developer.hashicorp.com/vault/docs/auth/kubernetes

fafg commented 1 year ago

PR: https://github.com/hashicorp/go-kms-wrapping/pull/177